The IRM board must use an IS cost, benefit and risk methodology when completing a cost, benefit, impact and risk analysis. The project plan must clearly show how the project will be managed and controlled, and must provide timetables and details on how the scope will be accomplished.
IRM bodi lazima kutumia IS gharama, faida na mbinu hatari wakati kukamilisha gharama, faida, athari na hatari uchambuzi. mpango wa mradi lazima kuonyesha wazi jinsi mradi huo kusimamiwa na kudhibitiwa, na lazima kutoa ratiba na maelezo juu ya jinsi wigo itakuwa yametimia.