George Westerman is a Research Scientist in MIT Sloan’s Center for Information Systems Research (CISR). In this video, he discusses the following key concepts in IT risk management: how IT managers can improve alignment and understanding, both in IT and the business, by discussing IT risk considerations in terms of key enterprise risks; how organizations build effective IT risk management capability through the disciplines of foundation, the risk governance process, and risk aware culture; and how risk management is an opportunity not just to protect the firm, but to drive improvements in IT management and business outcomes.