Effective Information Technology (IT) risk management ensures IT related risks (IT Risk) are appropriately governed and effectively addressed within the organization and is enabled by establishing a management framework that initiates and controls the deployment of IT and risk management both internally and in conjunction with contracted Third Parties (where a business need for external services exist).