are metrics capable of showing that the organizaztion is subject or has a high probability of being subject to a risk that exceeds the defined risk appetite. Practitioner Guide The second important document about Risk IT is the Practitioner Guide. It is made up of eight sections: Defining a Risk Universe and Scoping Risk Management Risk Appetite and Risk Tolerance Risk Awareness, Communication and Reporting Expressing and Describing Risk Risk Scenarios Risk Response and Prioritisation A Risk Analysis Workflow Mitigation of IT Risk Using COBIT and Val IT Relationship with other ISACA frameworks Risk IT Framework complements ISACA’s COBIT, which provides a comprehensive framework for the control and governance of business-driven information-technology-based (IT-based) solutions and services. While COBIT sets good practices for the means of risk management by providing a set of controls to mitigate IT risk, Risk IT sets good practices for the ends by providing a framework for enterprises to identify, govern and manage IT risk. Val IT allows business managers to get business value from IT investments, by providing a governance framework. VAL IT can be used to evaluate the actions determined by the Risk management process. Relationship with other frameworks Risk IT accept Factor Analysis of Information Risk terminology and evaluation process. ISO 27005 For a comparison of Risk IT processes and those foreseen by ISO/IEC 27005 standard, see IT risk management#Risk management methodology and IT risk management#ISO 27005 framework ISO 31000 The Risk IT Practitioner Guide appendix 2 contains the comparison with ISO 31000 COSO The Risk IT Practitioner Guide appendix 4 contains the comparison with COSO See also COBIT COSO Enterprise risk management Factor analysis of information risk (FAIR) ISACA ISO 31000 Risk Risk appetite Risk factor (computing) Risk management Risk tolerance Val IT References External links Risk IT main page on ISACA web site Risk analysis methodologies Information technology governance IT risk management