This paper describes a risk management on information technology to support the sustainability of academic information system at the university. The purpose of this study was to identify and quantify risks of application of information technology in academic information system at the university level, with cases in SWCU (SIA-SAT), prioritizing information technology risks are found, and determining how the risks can be controlled or reduced. The methodology used was a qualitative method, the data collected through library research and field study: interviews, observation and analysis method Facilitated Risk Analysis Process (FRAP). The result achieved was the discovery of risks, namely the risk that mainly service availability, security and integrity of data, as well as the service policy. Handling the risk then carried through the stages of FRAP, the form control list for each risk, determining suitable control through cross reference sheet, and recommendations for action that can be performed in an action plan.