The 2010 IBM Global IT Risk Study revealed investing in IT risk management can provide significant business benefits
"The 2010 IBM Global IT Risk Study, based on an online survey of IT managers, revealed investing in IT risk management can provide significant business benefits, most particularly in the areas of business continuity and safeguarding the company's reputation.
Although IT risk applies across processes, activities and systems, IT security (vulnerability to hackers and unauthorized access/use of company systems) is the leading concern among the majority of the IT professionals surveyed. Managing IT risk should be viewed as more than a defensive tactic that can increase a company's agility and create growth opportunities while reducing costs. Yet most IT managers spend their time focusing on infrastructure-related risk."