MENTAL MODEL · M5006

Technology Risk Management

BusinessHigh supportManagement

Included

Updated 2026-08-18

Loading revision record…

INTRODUCTION

English translation pending.

CORE DEFINITION

Technology risk management identifies, assesses, mitigates, and monitors the risks that arise from technology, including outright failure, obsolescence, dependence on a single supplier or system, and security breaches. It developed alongside enterprise risk management as organizations recognized that technology failures propagate quickly across operations. The core claim is that a closed loop of identification, assessment, mitigation, and monitoring converts unpredictable technical accidents into bounded, tolerable probabilities. Key qualifications are that risks must be graded so that mitigation effort matches exposure, and that excessive caution can itself stifle innovation.

SCAFFOLDING EFFECT

psychology

Reduce cognitive load

- Grade the exposure: rate each risk by probability and impact before spending on it. - Break single points: add redundancy or alternative suppliers where one failure would halt everything. - Close the loop: schedule monitoring and review instead of treating mitigation as finished.

anchor

Anchor fast decisions

Technology risks rarely stay local: a failed service, an obsolete component, or a single supplier can interrupt every process that depends on it, and the failure spreads faster than people can react. Rating each risk by probability and impact directs limited mitigation effort toward the exposures that matter. Redundancy, substitution, and insurance then reduce the impact of the risks that remain, and continuous monitoring catches the ones that change.

MINIMUM ACTION

In progress 0/1

Practice this model in one real situation:

Build a list of technology risks covering failure, obsolescence, dependency, and security. 2. Estimate the probability and impact of each one. 3. Mitigate the largest exposures through redundancy, substitution, or insurance. 4. Assign an owner and a review date to every risk on the list. 5. Monitor continuously and update the assessment as systems change.

Check to track your progress (stored locally)

Learning progress0%

account_treeGenealogyexpand_more

menu_bookReferencesexpand_more

Source support: Explicit

link
en.wikipedia.orghttps://en.wikipedia.org/wiki/IT_risk_managementZH · Explicit
verified

RELATED MODELS