The growing importance of enterprise risk management and the resulting integration efforts put the need for separate IT risk management frameworks in question. In this research we analyse common and distinct elements of the COSO enterprise risk management and ISACA Risk IT frameworks. The analysis affirms the hypothesis that separate IT risk management frameworks are redundant.

The IT-Capability Maturity Model [IT-CMF] is a high-level process capability maturity framework for managing the IT function within an organization. The framework identifies a number of critical IT processes, and describes an approach to designing maturity frameworks for each process. Unlike previous maturity model-based approaches, the IT-CMF is a novel approach to managing IT resources becaus...

The literature argues that organizations cannot be competitive if their business and information technology strategies are not aligned. Yet achieving strategic alignment continues to be a main concern for business executives. So this research seeks to address the research problem of the lack of alignment between IT strategy and business strategy. Past studies have shown that flexibility in IT i...