Vzpostavljen in učinkovito delujoč proces obvladovanja tveganj organizaciji omogoča, da se le-ta osredotoča na svojo osnovno dejavnost in tako dosega predvideno poslovno uspešnost. Krovno odgovornost za upravljanje nad tveganji v organizaciji prevzema vodstvo podjetja. Uvedba in uporaba IT sistemov v znatni meri prinašata koristi na mnogih področjih poslovanja, vendar istočasno vnašata nova, marsikdaj do sedaj nepoznana tveganja za organizacijo. Analiza tveganj je postopek, v katerem ocenimo verjetnost nastanka tveganj in njihovih posledic ter določimo ukrepe, ki so potrebni za zagotavljanje doseganja ciljev. Vpeljava RFID tehnologij novejše generacije omogoča organizacijam uvajanje čedalje bolj avtomatiziranih poslovnih procesov. Pred uvedbo sistema RFID identifikacije v podjetju X se izvede celovita analiza IT tveganj za izbrani sistem po metodologiji NIST SP 800-30.

An established and an efficient working process of risk management allows an organization to focus on its basic activity and achieve intended business success. But it is the company's management who is responsible for risk management governance. Introduction and use of IT systems bring a lot of benefits to various business fields, but at the same time also new, sometimes unknown risks for the organization. A risk analyis is a procedure used to evaluate possible occurance of risks and their consequences and to assign actions needed to achieve the goals set. Introduction of RFID technologies of new generation helps organizations to initiate more automatized business processes. Before the introduction of RFID identification system the whole IT risk analysis for the chosen system is carried out by the methodology NIST SP 800-30.