For many companies, IT risk management is an essential component of their risk management strategy. Andreas Brodtrager from Allianz Technology gives us an exclusive insight into procedures for recording and evaluating IT services and their relevant risks. We learn how risks can be addressed using controls from the COBIT framework, and the importance of control monitoring and improvement measures.