Work

Identifying and classifying data risk sources and triggering events: A conceptual two-stage method for risk-aware data governance

Year: 2025

Type: article

Abstract: In a data-intensive environment, the ability to accurately identify and manage data risks is essential for maintaining cybersecurity, preventing potential threats, supporting decision-making, and enabling effective post-incident analysis. Existing approaches to data risk identification are typically structured around the stages of the data lifecycle, offering a broad perspective but often lacking alignment with the specific dynamics of business operations. This study proposes a data-driven framework for data risk identification that reflects practical business contexts. The framework incorporates 25 categorized risk sources and 13 defined risk-triggering events, using data analysis to examine their interactions and influence. The approach demonstrates strong alignment with documented risk incidents and effectively captures relevant risk factors across operational scenarios. The implementation of this framework enables organizations to identify critical risk points more precisely, enhance the accuracy and timeliness of risk response strategies, and strengthen data governance practices. It also facilitates more informed strategic planning and cross-functional coordination, contributing to improved resilience and operational efficiency.

Source: Journal of Management Science and Engineering

DOI: 10.1016/j.jmse.2025.07.003

Authors: Mengdi Mu, Jun Hao, Jin Li, Jin Li, Jianping Li, Jianping Li

Institutions: University of Chinese Academy of Sciences, Chinese Academy of Sciences, Computer Network Information Center, Xi'an Jiaotong University

Language: English

Topic: Information and Cyber Security

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

Open Access status: diamond