Article 46 – Information Systems Risk Management
49030.2 Purpose
-
The purpose of this policy is to identify and provide for the use of a generic systems approach as part of the Department’s risk management program. This process shall assist users, systems designers, systems developers, and management in answering a number of basic questions, such as:
-
What is the nature of the problem?
-
What needs to be changed, modified, or accomplished?
-
What alternatives are available to solve the problem?
-
How, specifically, shall the problem be solved?
-
How well does the new solution work?
-