RiskIT: A Useless Risk Framework due to Copyright Restrictions?

ISACA.org have recently published a Risk Framework which they claim is designed to fill the gap between generic risk frameworks and detailed ones.

I wish I knew what was in it.

But if I did know, I wouldn’t be able to tell you or make use of the information.

That’s what the isaca.org copyright policy states.

Specifically, the second paragraph starts with the words:

“The Material that you are downloading may only be used for personal, informational, non-commercial purposes.”

What the proposed use of an IT risk framework that cannot be used for commercial purposes is I do not know. (Perhaps I could use it to manage my kid’s Wii.)

Anyway, if you are willing to agree not to use this framework in your organization, ISACA.org have kindly made it available for the cost of your email address and contact information here.

Just don’t tell me what is in it. I might use that information for corporate, commercial purposes. I wouldn’t want you to break their copyright policy.

• RiskIT Method for Software Risk Management
• Risk-IT! Game for understanding financial terms
• The RiskIT method for risk management developed by professor Jyrki Kontio
• University of Florida Risk IT Assessment Guidelines
• RiskIT.org.uk – A game to convince you to live near nuclear power stations.
• Eric Dressen Risk It skateboarding video
• Tom Knox Risk It skateboarding video

These RiskIT don’t require you to agree to a ludicrous copyright policy before you can see them.