-

New Risk Toolkit From ISACA Provides Risk Management Templates and Policies

Risk Starter Kit provides professionals new to risk with resources to aid with activities like risk maturity assessments, risk reporting and risk scenarios

SCHAUMBURG, Ill.--(BUSINESS WIRE)--As enterprises have learned even more acutely over the past few years, managing risk is crucial to minimizing disruption and ensuring business continuity in the face of challenges. To aid enterprises in creating their own tailored risk management program, ISACA has released a Risk Starter Kit, which contains a wealth of tools and templates to facilitate risk assessment, risk appetite, risk maturity assessment, risk policy creation and other related tasks.

Created by a group of global risk experts, the Risk Starter Kit includes guidance and templates that provide enterprises with a strong foundation for creating their own customized risk management tasks suited to their needs. These resources include:

  • Risk appetite statement
  • Risk assessment template
  • Risk reporting
  • Risk governance tools, including an IT risk management policy and a risk committee charter
  • Risk maturity assessment
  • IT risk job descriptions
  • Risk scenario template
  • Risk and controls library
  • Risk register

Rather than having to create each tool to perform standard risk management tasks on their own, enterprises can save time by downloading the components and editing and customizing them based on their own needs and key risk management functions.

“Risk professionals know that a strong risk management program requires a coordinated spectrum of activities that are integrated into the business and involve support and buy-in from across all levels of the enterprise,” says Paul Phillips, ISACA Director of Event Content Development and Risk Professional Practice Lead. “It takes time and reflection for enterprises to perform risk management functions and having a trusted foundation from which to design these risk activities adds significant value. These tools will help enterprises meet their unique goals and needs within their industry and region.”

The Risk Starter Kit is free for ISACA members and US$49 for nonmembers and can be downloaded at https://store.isaca.org/s/store#/store/browse/detail/a2S4w000005EgZbEAK.

ISACA offers additional risk resources, including the Risk IT Framework and the Certified in Risk and Information Systems Control (CRISC) certification, which can be found at www.isaca.org/resources/it-risk. Professionals can also discuss topics related to risk management with others in the global community in the ISACA Engage online forum here.

About ISACA

For more than 50 years, ISACA® (www.isaca.org) has equipped individuals and enterprises with the knowledge, credentials, education, training and community to progress their careers, transform their organizations, and build a more trusted and ethical digital world. ISACA is a global professional association and learning organization that leverages the expertise of its more than 150,000 members who work in digital trust fields such as information security, governance, assurance, risk, privacy and quality. It has a presence in 188 countries, including 225 chapters worldwide. Through its foundation One In Tech, ISACA supports IT education and career pathways for underresourced and underrepresented populations.

Contacts

Emily Van Camp, +1.847.385.7217, communications@isaca.org
Kristen Kessinger, +1.847.660.5512, kkessinger@isaca.org

ISACA


Release Versions

Contacts

Emily Van Camp, +1.847.385.7217, communications@isaca.org
Kristen Kessinger, +1.847.660.5512, kkessinger@isaca.org

More News From ISACA

ISACA’s 2026 North America Conference to Highlight Governance and Trust in Emerging Technologies

SCHAUMBURG, Ill.--(BUSINESS WIRE)--Leading experts in the tech industry will gather at the ISACA 2026 North America Conference in Las Vegas, NV, from 6-8 May, to explore the latest trends in IT audit, risk management, governance, cybersecurity, privacy, and emerging technologies. The ISACA 2026 North America Conference, which will be held in-person and virtually, will feature sessions on AI governance, digital identity, privacy by design, human-centric compliance, and more. Attendees can earn u...

ISACA Launches Future‑Ready IT Audit Framework Update to Strengthen Digital Trust in an AI‑Driven Environment

SCHAUMBURG, Ill.--(BUSINESS WIRE)--Recent rapid evolution in the technology space has led to significant shifts and new considerations for the audit profession as well. IT audit and assurance professionals can arm themselves with new tools to help them keep pace, including ISACA’s newly updated IT Audit Framework (ITAF): A Professional Practices Framework for IT Audit. The revamped 5th edition now incorporates updated terminology, refreshed examples, and expanded scope to better address emergin...

ISACA Unveils 2026 Global Events Slate for Digital Trust Professionals

SCHAUMBURG, Ill.--(BUSINESS WIRE)--ISACA, a global association empowering the workforce advancing trust in technology, has released its 2026 event schedule, with both in-person and virtual opportunities. ISACA’s events offer expert insights in the areas of digital trust, cybersecurity, audit, governance, risk, privacy and emerging technologies for leaders worldwide. Flagship Conferences: ISACA North America Conference | 6-8 May 2026 | Las Vegas, Nevada, USA & Virtual The premier event for b...
Back to Newsroom