Risk management practice awareness in information management and security systems: A review on universities

Today, businesses that want to be successful with the increasing competitive environment want to give priority to both information and risk management. With the developing technology, it will not be possible to think separately about information management and risk management. Businesses that can successfully implement information management and risk management together are successful. Businesses are now turning to technological investments rather than capital investments. Better risk management can be achieved with technology. Information security and protection of information assets are extremely important for good risk management. Effective management of risks is directly related to the management of information. In this direction, knowledge-based risk management has been preferred by businesses. Information management systems and risk management systems should be integrated with each other. In risk management processes, it is aimed to determine the potential risks of information-based assets, to evaluate the risks and to determine the answers to the risks. The risks that may arise with the security of information systems are reduced. Along with information security, a successful risk management provides competitive advantage, company profitability, sustainability and reputation gain. In this study, the concepts of information management and risk management were explained, the place and importance of risk management in information management and security systems was tried to be revealed, and it was aimed to examine the behavior and awareness of the survey participants. In this study, a survey was conducted for the administrative staff working in universities operating in Turkey as a method. In the survey study, both demographic questions and questions that will reveal the approach and awareness of the participants were included.