A risk-metric framework for enterprise risk management

We describe a risk-metric framework that supports enterprise risk management. At the core of the framework is the notion of a risk profile that provides risk measurement for risk elements. By providing a generic template in which metrics can be codified in terms of metric space operators, risk profiles can be used to construct a variety of risk measures for different business contexts. These measures can vary from conventional economic risk calculations to the kinds of metrics that are used by decision support systems, such as those supporting inexact reasoning and that are considered to closely match how humans combine information.

[1]  Berthold Schweizer,et al.  Probabilistic Metric Spaces , 2011 .

[2]  Andrew Jaquith.  Security Metrics: Replacing Fear, Uncertainty, and Doubt , 2007 .

[3]  Steven J. Root.  Beyond Coso: Internal Control to Enhance Corporate Governance , 1998 .

[4]  G. Evans,et al.  The BT Risk Cockpit — a visual approach to ORM , 2007 .

[5]  Lawrence A. Gordon,et al.  The economics of information security investment , 2002, TSEC.

[6]  David W. Hosmer,et al.  Applied Logistic Regression , 1991 .

[7]  Lotfi A. Zadeh,et al.  Fuzzy logic, neural networks, and soft computing , 1993, CACM.

[8]  Vladik Kreinovich,et al.  Strict Archimedean t-norms and t-conorms as universal approximators , 1998, Int. J. Approx. Reason..

[9]  Lawrence A. Gordon,et al.  The economics of information security investment , 2002, TSEC.

[10]  J. L. Harrison,et al.  The Government Printing Office , 1968, American Journal of Pharmaceutical Education.

[11]  Radko Mesiar,et al.  On the Relationship of Associative Compensatory operators to triangular Norms and Conorms , 1996, Int. J. Uncertain. Fuzziness Knowl. Based Syst..

[12]  Didier Dubois,et al.  A review of fuzzy set aggregation connectives , 1985, Inf. Sci..

[13]  G. G. Stokes.  "J." , 1890, The New Yale Book of Quotations.

[14]  H. Zimmermann,et al.  Latent connectives in human decision making , 1980 .

[15]  Edward H. Shortliffe,et al.  Rule Based Expert Systems: The Mycin Experiments of the Stanford Heuristic Programming Project (The Addison-Wesley series in artificial intelligence) , 1984 .

[16]  Birgit Pfitzmann,et al.  Optimized enterprise risk management , 2007, IBM Syst. J..

[17]  Bruce G. Buchanan,et al.  The MYCIN Experiments of the Stanford Heuristic Programming Project , 1985 .