Work

Manage Risks through the Enterprise Architecture

Year: 2012

Type: conference-paper

Abstract: The goal of Risk Management activities is to define prevention and control mechanisms to address the risks attached to specify activities and valuable assets. Many Risk Management efforts operate in silos with narrowly focused, functionally driven, and disjointed activities. That fact leads to a fragmented view of risks, where each activity uses its own language, customs and metrics. The lack of interconnection and holistic view of risks limits an organization-wide perception of risks, where interdependent risks are not anticipated, controlled or managed. In order to address the Risk Management interoperability and standardization issues, this paper proposes an alignment between Risk Management, Governance and Enterprise Architecture activities, providing a systematic support to map and trace identified risks to enterprise artifacts modeled within the Enterprise Architecture, supporting the overall strategy of any organization. We discuss the main relationships between Risk Management and Enterprise Architecture and propose an architecture to integrate risks concerns into the overall organization environment.

Source: Hawaii International Conference on System Sciences (HICSS)

DOI: 10.1109/hicss.2012.419

Authors: Jose Barateiro, Goncalo Antunes, Jose Borbinha

Institutions: Instituto de Engenharia de Sistemas e Computadores Investigação e Desenvolvimento, National Laboratory for Civil Engineering, Institute for Systems Engineering and Computers, Universidade Técnica de Lisboa

Language: English

Topic: Information Technology Governance and Strategy

Subfield: Management Information Systems

Field: Business, Management and Accounting

Domain: Social Sciences

Open Access status: green

Funders: European Commission, Fundação para a Ciência e a Tecnologia

Awards: Digital Preservation for Timeless Business Processes and Services, Sustaining Heritage Access through Multivalent ArchiviNg