TY - JOUR TI - Gestión de riesgos y controles en sistemas de información: del aprendizaje a la transformación organizacional JO - ESTUDIOS GERENCIALES;Vol. 28 No. 125 - Octubre/Diciembre 2012 PB - Universidad Icesi PY - 2012 issn 01235923 AB - Risk management and controls for information systems (RMCIS) is commonly seen as a technical function used by experts in information technology, software engineers, or information systems programmers. . However, this task requires a much broader perspective that helps the learner have better comprehension of its meaning and the processes of organizational change that it requires. This article shows the results of a research process, approached from the perspective of soft systems thinking, to support RMCIS in organizations, showing the human activity system of the strategic management of information technology, the organizational changes necessary, and a description of the activities and methods proposed. KW - FACULTAD DE CIENCIAS ADMINISTRATIVAS Y ECONÓMICAS KW - PRODUCCIÓN INTELECTUAL REGISTRADA - UNIVERSIDAD ICESI KW - GESTIÓN KW - RIESGOS KW - APRENDIZAJE KW - PENSAMIENTO KW - SISTEMAS DE INFORMACIÓN KW - RISK MANAGEMENT AND CONTROLS KW - INFORMATION SYSTEMS KW - SOFT SYSTEM THINKING KW - ORGANIZATIONAL TRANSFORMATION UR - http://www.icesi.edu.co/revistas/index.php/estudios_gerenciales/article/view/1532 ER -