Logo des Repositoriums
 

Quantifying Risk Propagation Within a Network of Business Processes and IT Services

dc.contributor.authorGonzález-Rojas, Oscar
dc.contributor.authorCastro, Nicolás
dc.contributor.authorLesmes, Sebastian
dc.date.accessioned2021-05-01T06:22:47Z
dc.date.available2021-05-01T06:22:47Z
dc.date.issued2021
dc.description.abstractNowadays, the organic nature of business processes and the increasingly complex and dynamic business environment make organizations face severe operational risks. However, current risk analysis methods of Information Technology (IT) resources ignore inter-process correlation and thus inter-process risk propagation. This gap needs a solution since the rigid alignment of organizations cause the risks which propagate throughout the whole organization to be the most serious operational risks. This paper presents a holistic approach for quantifying risk propagation in business processes based on the risk analysis of their underlying IT and human resources. This approach adapts financial techniques to quantify the level of risk that average and severe events on IT resources generate on individual business processes, and to quantify the risk propagation impact among dependent processes. This approach was applied to an enterprise modeling case study to quantify risk propagation for different risk epicenter scenarios. The results show that the proposed approach is capable of finding and quantifying both direct and indirect dependencies among operational assets within an organization. A high level of accuracy was observed when comparing the actual value of the process risk and the projected value considering risk propagation.de
dc.identifier.doi10.1007/s12599-020-00634-3
dc.identifier.pissn1867-0202
dc.identifier.urihttp://dx.doi.org/10.1007/s12599-020-00634-3
dc.identifier.urihttps://dl.gi.de/handle/20.500.12116/36356
dc.publisherSpringer
dc.relation.ispartofBusiness & Information Systems Engineering: Vol. 63, No. 2
dc.relation.ispartofseriesBusiness & Information Systems Engineering
dc.subjectBusiness processes
dc.subjectEvent-based systems
dc.subjectIT resources
dc.subjectPropagation analysis
dc.subjectRisk quantification
dc.subjectSpillover effects
dc.titleQuantifying Risk Propagation Within a Network of Business Processes and IT Servicesde
dc.typeText/Journal Article
gi.citation.endPage143
gi.citation.startPage129

Dateien