Operational risk in banks with a focus on IT development

This diploma thesis deals with risk management in banking institutions with a focus on risk in the field of information technology. The theoretical part focuses on the classification, risk management and setting the specifics of IT operational risk management. In the practical parts, theoretical aspects are applied in the context of the banking institution and its IT department. Two hypotheses are set out below, of which the first hypothesis is: Information technology risk represents the largest and most significant operational risk for banking institutions, which should not be underestimated. The second hypothesis is: An agile approach to managing new IT developments and risks related to them in principle limits the operational risks thanks to its transparency and focus on products instead of on a hierarchical organization and on projects that are frequently do not related to one another. It is an important aspect that the supplies are done in individual sub-units which work independently but thanks to their smaller size are easier to be assessed and managed. The hypotheses are evaluated on the example of two banks, while each of them approaches the management of operational IT risk in a diametrically different way.