Information Technology Operational Risk: A Teaching Case

IT operational risk refers to any threat that could lead to the inappropriate modification, lack of availability, destruction, or theft of IT assets. This paper presents a real-world teaching case study, based upon an actual consulting engagement of risk assurance professionals working at a multinational professional services provider, to bring practical experience with managing IT operational risk into the classroom. Guidance for implementing this teaching case within an Information Systems course is provided. Students may work in teams, assuming the role of consultants, to provide recommendations involving an organization's IT operational risks in operations, financial reporting, and compliance. Feedback from participating students revealed that the learning objectives of the case were met. These finding confirm that the Global CyberDerma Solutions case is a useful tool to teach students, who will be entering the workplace, about IT operational risks confronting organizations.