Information Risk Management

Information Risk Management (IRM) departments are used to safeguard the integrity of a firm's data, infrastructure and applications.

IRM teams identify and fix exposures to information risk (viruses, hackers, inappropriate permissions, etc) and handle any potential incidents and computer forensic investigations. IRM teams often work closely with Technology teams to ensure technical security of front and back office systems.

The focus of IRM is to identify potential risks and help design practical solutions to address these. When a totally riskfree solution is not achievable IRM teams recommend, advise, and provide risk evaluations so that senior management can make informed business decisions.