Skip to main content
All glossary terms

Regulation & risk

Tech Risk Management

Technology risk management is the process of identifying, assessing, treating, and monitoring risks related to technology systems and their use. It can cover availability, security, change, data, suppliers, and operational dependencies according to an organization’s needs.

Also known as technology risk management.

Why it matters in practice

Technology risks can affect business services even when individual components appear healthy, because systems depend on people, vendors, and shared infrastructure. A useful process connects technical evidence with accountable owners and operational decisions. It complements specialized disciplines such as cybersecurity and privacy rather than replacing them.

Example

An operations team assesses how a failed identity provider could affect access to a customer service and records a recovery owner.

Educational note

This definition is general information, not legal advice. It may omit facts that matter to a specific situation and does not establish or guarantee compliance.