The growing importance of enterprise risk management and the resulting integration efforts put the need for separate IT risk management frameworks in question. In this research we analyse common and distinct elements of the COSO enterprise risk management and ISACA Risk IT frameworks. The analysis affirms the hypothesis that separate IT risk management frameworks are redundant.

Given the importance of IT investments in today’s organization, firms tend to spend increasing amounts of time and resources to better manage IT projects. However these projects continue to have high failure rates thus highlighting the need for improved risk management. A stream of IS research has focused on identifying several causes of managerial risks. The theory base that has been used in t...

Health IT evaluation studies have often been found to be of limited quality. To address this problem, several guidelines and frameworks have been developed as tools to support improvement of the quality of evaluation studies. In this contribution, we review available guidelines and then present the Good Evaluation Practice Guideline in Health Informatics (GEP-HI) in more detail. GEP-HI is a com...