| Summary: | IT Risk Management is the application of risk management methods to information technology in order to manage IT risk. The business risk associated with the use, ownership, operation, involvement, influence and adoption of IT within an enterprise or organization. The purpose of this paper is to overcome the issue in implementing the IT Risk Management at Tasik Chini Research Centre (PPTC), Universiti Kebangsaan Malaysia. This paper aimed to enhance the risk management awareness by promoting active involvement of the workers in the daily affairs and the decision-making process. This paper used both quantitative and qualitative methods. Data was collected by interviewing the community living at the edge of the lake as well as collecting on-site at the rivers's monitoring station. The negative feedback include no framework of IT risk management at PPTC, lack of understanding in IT risk management concept among the PPTC staffs, and the need to promote a few aspects of the risk management policy, for instance, by introducing the development of risk management system or a customized model to register risk and data collection. The positive side was not limited to IT solely. They include the interest shown by PPTC top managements in implementing the full IT risk management in order to achieve the objectives of research centre. The results were also used in the development of the early warning system in water quality prototype as an early warning to the PPTC staffs and Orang Asli living in the vicinity of Tasik Chini. The study began by identifying the problems faced by the PPTC staffs to the usability of the risk management system that are available from the interviews. Usability characteristics of risk management system and early warning system that are suitable to the PPTC staffs and Orang Asli are identified and a guideline for the users interface usability of information systems is constructed.
|
|---|
