Service-Oriented Architecture for Risk Management

Fugini, Mariagrazia; Ramoni, Filippo; Raibulet, Claudia

doi:10.1109/notere.2011.5957995

Cited by 4 publications

(1 citation statement)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…transformation) and traceability on the other side [39]. Being service-oriented, a framework thus allows to (i) use identified risk elements for (strategic) decision (acquisition of services in the infrastructure) and/or (ii) to take actions to mitigate risk within the service adoption/development [19]. Support for BITA refers to the correspondence between business and IT objectives.…”

Section: The Choice Of Modrigomentioning

confidence: 99%

Integrating Risk Representation at Strategic Level for IT Service Governance: A Comprehensive Framework

Ghazaleh

Wautelet

Kolp

et al. 2020

Lecture Notes in Business Information Processing

View full text Add to dashboard Cite

Organizations tend to set and pursuit objectives against an environment which faces levels of uncertainty. The effect of these uncertainties on objectives can be positive (opportunity risk) or/and negative (hazard risk). With every decision made by people within a company, risks are created, modified, updated or deleted. Therefore, the way these decisions are made in terms of change management strategy as well as the information they are based on, influence how objectives are achieved and requirements fulfilled. Despite the importance of risk definition and risk taking at all organizational levels, organizations mostly consider risk at the management and operational levels. Risks nevertheless also need to be considered at the strategic (governance) level because they constitute what hampers an organization to achieve its strategy. This paper focuses on risk at the strategic level and for this purpose it enriches the Model Driven IT Governance (MoDrIGo) framework; the enriched framework allows to evaluate the alignment of business IT services with strategic objectives while balancing this alignment/support with the potential risk at governance level. All in all, the framework is applicable in broader governance scenarios. The relevance of MoDrIGo as starting point to build a risk-aware governance framework (compared to other similar methods) is mainly because of its service-orientation and its focus on software development issues. The enhanced framework thus provides a high-level risk overview that helps organizations to successfully perceive, detect and treat risks when pursuing their objectives.

show abstract

Section: The Choice Of Modrigomentioning

confidence: 99%