QUT ePrints (Queensland University of Technology) · 2005 · 162 citations · 16 references
Open access
Risk has traditionally been viewed from a project‑management lens, yet it is an intrinsic property of every business process, and the lack of dedicated techniques for identifying, representing, and analyzing such risks threatens operational mitigation and legal compliance. This paper aims to address risk management within business process management by presenting a taxonomy of process‑related risks and exploring its application in analysis and documentation. The authors extend a contemporary process‑modelling method to capture process‑related risks, their relationships to goals, other risks, and processes, illustrated with a case study of a critical administrative process in a university.
In the context of process management, risk has been considered mainly from a project management perspective. But risk is an inherent property of every business process and techniques are needed to identify, represent and analyse business process risks. The absence of such techniques is a concern because both operational risk mitigation and legal compliance depend on the sufficient identification of corporate risk. This paper addresses the topic of risk management in the context of business process management. We present a taxonomy of processrelated risks and discuss how this taxonomy can be applied in the analysis and documentation of business processes. We demonstrate how a contemporary process modelling method can be extended to document process-related risks and their relationships with goals, other risks and processes. A critical administrative process in an university is used as an example.
16
Design science in information systems research
Alan R. Hevner, Salvatore T. March, Jinsoo Park et al. · MIS Quarterly · 2004 · 7.7K citations
Information Systems, Education, Information Technology Management +16