Risk management is critical to the success of contemporary firms and while new technologies present opportunities for innovation and growth, they present new risks. Risk management of information systems and technology (IS/IT) is particularly critical because firms in almost all sectors of the...

In theory, enterprise risk management (ERM) appears to be a succinct and effective risk management model. In practice, as is the case with most managerial techniques, the devil is in the implementation. This study explores this issue by examining how the composition of ERM groups determines...