An Integrated Approach to managing Business Process Risk Using Rich Organizational Models

Authors

M.M. Zahidul Islam, University of WollongongFollow
Moshiur Bhuiyan, University of WollongongFollow
Aneesh Krishna, University of WollongongFollow
Aditya K. Ghose, University of WollongongFollow

RIS ID

32194

Publication Details

Islam, M., Bhuiyan, M., Krishna, A. & Ghose, A. K. (2009). An Integrated Approach to managing Business Process Risk Using Rich Organizational Models. In R. Meersman, T. Dillon & P. Herrero (Eds.), On the Move to Meaningful Internet Systems: OTM 2009 (pp. 273-285). Berlin, Germany: Springer Verlag.

Abstract

Business processes represent the operational capabilities of an organization. In order to ensure process continuity, the effective management of risks becomes an area of key concern. In this paper we propose an approach for supporting risk identification with the use of higher-level organizational models. We provide some intuitive metrics for extracting measures of actor criticality and vulnerability from organizational models. This helps direct risk management to areas of critical importance within organization models. Additionally, the information can be used to assess alternative organizational structures in domains where risk mitigation is crucial. At the process level, these measures can be used to help direct improvements to the robustness and failsafe capabilities of critical or vulnerable processes. We believe our novel approach, will provide added benefits when used with other approaches to risk management during business process management, that do not reference the greater organizational context during risk assessment.