Research and Development of Risk Management Models in IT

The paper focuses on the main stages of life cycle of the software and hardware of computer systems and networks of the company, as well as the key IT risks. The main problem in the work is the lack of common risk management standards adapted to the conditions of the Russian market, resulting in inconsistencies in approaches to the management of existing IT processes in enterprises, the lack of interaction between its structural divisions. Based on the analysis of best practices, existing methodologies (CORAS, OCTAVE, CRAMM, MOF risk management, neck) and standards (ISO 17799, COBIT 5 for Risk, BSI and BSI-Standards 100-3, NIST 800-30 and others.) - It was carried out the classification and identification of IT risks; - A methodology was proposed to identify and reduce risks in IT based on an integrated scheme of interaction between information and business units; - The risk management model adapted for the Russian market was developed and tested. The developed model of IT risk management is designed to monitor and to improve the quality of IT services provided, to reduce the risks of IT processes, to improve management efficiency and to ensure business continuity.