**Section 3**

**Information Management** 

20 Will-be-set-by-IN-TECH

294 Risk Management for the Future – Theory and Cases

Honsell, M. & Tein, M. (1891). Auftreten und Verlauf der Hochwasser von 1824, 1845,

Königliches Ministerium des Innern (ed.) (1896). *Verwaltungsbericht der Königlichen*

Kundzewicz, Z.W. & Brázdil, R. (eds.) (2006). Special Issue: Historical Hydrology. *Hydrological*

Lobanova, M. (2002). Application of past information for reducing flood risk (the case of

Ludwig, K. and Bremicker, M. (eds.) (2006). The Water Balance Model LARSIM - Design,

LfU, Landesanstalt für Umweltschutz Baden-Württemberg. (2000). *Das Hochwasser vom*

LfU, Landesanstalt für Umweltschutz Baden-Württemberg. (2005). *Abflusskennwerte in Baden-Württemberg, Oberirdische Gewässer/Gewässerökologie 94*, Karlsruhe, Germany. Middelmann, M. (ed.) (2007). *Natural Hazards in Australia: Identifying Risk analysis*

Ott, B. & Uhlenbrook, S. (2004). Quantifying the impact of land-use changes at the event and

Rapp, J. & Schönwiese, C.D. (1996). Niederschlag- und Temperaturtrends in

Seidel, J., Imbery, F., Dostal, P., Bürger, K., & Sudhaus, D. (2009). Potential of historical

Schübler, G. (1825). Über die ungewöhnliche Überschwemmung zu Ende Octobers

Sudhaus, D., Seidel, J., Bürger, K., Dostal, P., Imbery, F., Mayer, H., Glaser, R., & Konold, W

Statistisch-Topographisches Bureau (ed.) (1883). *Württembergische Jahrbücher für Statistik und*

Straub, H. Historische Hochwasserinformationen und deren Nutzung. Arbeitskreis KLIWA

*Februar 1893/94 und 1894/95*, Stuttgart.

(eds.), 231-236. CSIC, Madrid, Spain.

*Requirements*, Geoscience Australia, Canberra.

*System Science*, Vol. 8, No. 1, 62-78.

*System Sciences*, Vol .9, 175 - 183.

*Landeskunde*, Stuttgart, Germany.

Berlin, Heidelberg, Germany, 113 - 170.

*Landwirthschaftlichen Vereins*, Vol. 7, 191-198.

*and Earth System Sciences*, Vol 12, 1201 - 1209.

(ed.), Kliwa-Berichte, Heft 10, 113-130, 2007.

*Sciences Journal*, Vol. 51, No. 5.

*65*, Karlsruhe, Germany.

1852, 1876 und 1882-83, In: *Ergebnisse der Untersuchung der Hochwasserverhältnisse im deutschen Rheingebiet. Auf Veranlassung der Reichskommission zur Untersuchung der Stromverhältnisse des Rheins und seiner wichtigsten Nebenflüsse und auf Grund der von den Wasserbaubehörden der Rheingebietsstaaten gelieferten Aufzeichnungen*, Centralbureau für Meteorologie und Hydrographie im Grossherzogthum Baden (ed.), Ernst, Berlin.

*Ministerialabteilung für den Strassen- und Wasserbau für die Rechnungsjahre vom 1.*

Lensk city), In: *Palaeofloods, Historical Data and Climatic Variability: Applications in Flood Risk Assessment*, Thorndycraft, V.R., Benito, G., Barriendos, M. & Llasat, M.C.

Content and Applications. *Freiburger Schriften zur Hydrologie 22*, Freiburg, Germany.

*Oktober/November 1998 in Baden-Württemberg. Oberirdische Gewässer/Gewässerökologie*

seasonal time scale using a process-orientated catchment model. *Hydrology and Earth*

Baden-Württemberg 1955-1994 und 1895-1994, In: *Wasser - Die elementare Ressource: Leitlinien einer nachhaltigen Nutzung*, Lehn, H., Steiner, M., & Mohr, H.(eds.), Springer,

meteorological and hydrological data for the reconstruction of historical flood events - the example of the 1882 flood in Southwest Germany. *Natural Hazards and Earth*

des vorherigen Jahres und die dabei in verschiedenen Gegenden Württembergs Gefallene Regenmenge. *Correspondenzblatt des Württembergischen*

(2008). Discharges of Past Flood Events Based on Historical River Profiles. *Hydrology*

**13** 

*Malaysia* 

**Understanding Components of IT Risks and** 

There is no doubt that information technology (IT) or information system (IS) improves the efficiency and efficacy of our daily lives. IT derives much of its usefulness from the ability to link systems together to improve functionality and communications (Ahlan, 2005). Inherent in these links are interdependence, interoperability and interconnectedness (O'Brien, 1996). Traditionally, IT is perceived to take the role of back-end support system to an organisation and thus, has little strategic value. Nowadays, this perception has changed primarily due to the potentials that pervasive IT can provide to all aspects of daily profitable organisations', communities' or individuals' efficiencies and efficacies and ultimately to achieve strategies and objectives. IT innovations facilitate all these ever increasing sophistication of IT users

Nonetheless, the rapid adoption of IT poses organisations particularly to increasing and excruciating complex and sophisticated risks whether inherent or external. IT security, or risk, has been a highlight of every organisation since the inception of computer systems. Different organisations bear different sensitivity to particularly data and information risks and exposures to technical, organisational, project and human's risks (Wei *et al*., 2010; Ahlan *et al.,* 2011). Manufacturing environment, for example, is less sensitive to information risk compared to healthcare and education sectors which in turn less sensitive compared to banking and finance sector. Universities data and information are highly sensitive and the risks are high. The more IT-laden organisations the more IT risks they are subjected to. Moreover, IT hardware, software and systems are becoming more sophisticated and expensive. Likewise, hackers or computer intruders and fraudsters are also becoming more sophisticated and constantly one step ahead of technology (Gerace and Cavusoglu, 2009). Hence, this puts pressure on manufacturers and service providers as well as IT managers to

Hence, this study aims to synthesise the risk factors associated with IT/IS and categorise or classify them into a few main major themes to guide the IT management in their risk management exercises. This chapter is organised into five main sections. First, the chapter begins with introduction to IT and risk in general. Second is the description of

continuously increase the quality and security of their products and services.

**1. Introduction** 

(Ahlan, 2005).

**Enterprise Risk Management** 

*Kulliyyah of Information and Communication Technology* 

Abdul Rahman Ahlan and Yusri Arshad

*Department of Information Systems,* 

*International Islamic University Malaysia,* 
