A new Risk Management Practice Guideline is now available for use. It has been developed to support the IT professional in discharging the responsibility to assess and manage IT risks. As a certified CIPS IT professional you have the responsibility to generally understand the material in this guideline. In practice, you will need to exercise your professional judgment in deciding how this guideline would apply to your work.