The aim of this research is to establish a IT risk management framework for a commercial bank by which an organization can identify, measure, manage, monitor and report a risk. Framework helps the bank to manage its IT ...