| At present,China’s securities industry has developed to be a resource aggregated and product homogeneous market.The securities company needs to survive in such an intense competition by facing issues like,how to reduce operation risks,how to improve business performance,these problems need to be addressed urgently.Therefore,to develop a comprehensive IT risk management system can not only provide a reference for A-Securities’ IT risk management personnel,but also referenced for the securities industry.Use A-Securities’ IT risks as example,this thesis uses the theory of IT risk management,the checklist method,the Delphi method and risk decomposition structure(RBS),to build risk indicators,in order to identify the IT risk,and evaluate probability of occurrence and its impact.This thesis also intent do use risk matrix to pin point A-Securities’ IT risk in quantifiable manner and visualize the risks.Based on the risk management principle and protocol,this thesis proposed a targeted solutions to reduce its risk and risk management cost for A-Securities company in a comprehensive,rapid and effective manner.Meanwhile,setup a series of risk management protocols,to promote business performance by reducing IT risks,to increase the IT investment,which in turn reduces the IT risk as return.Besides,this thesis proposed plans to ensure the smooth implementation,which provides several response plans for risk challenges of A-Securities company.The plans are designed to defuse risks,as result to defeat negatives,gain reputations,and explore a new way to gain the market competition. |