Integrating Risks in Business Process Models

In the context of process management, risk has been considered mainly from a project management perspective. But risk is an inherent property of every business process and techniques are needed to identify, represent and analyse business process risks. The absence of such techniques is a concern because both operational risk mitigation and legal compliance depend on the sufficient identification of corporate risk. This paper addresses the topic of risk management in the context of business process management. We present a taxonomy of processrelated risks and discuss how this taxonomy can be applied in the analysis and documentation of business processes. We demonstrate how a contemporary process modelling method can be extended to document process-related risks and their relationships with goals, other risks and processes. A critical administrative process in an university is used as an example.

[1]  Thomas Peltier,et al.  Risk Analysis and Risk Management , 2004 .

[2]  Alan R. Hevner,et al.  Design Science in Information Systems Research , 2004, MIS Q..

[3]  Ingoo Han,et al.  The IS risk analysis based on a business model , 2003, Inf. Manag..

[4]  Chris Chapman,et al.  Transforming project risk management into project uncertainty management , 2003 .

[5]  Judy E. Scott,et al.  Managing risks in enterprise systems implementations , 2002, CACM.

[6]  James A. Sykes,et al.  Conceptual Modeling Process and the Notion of a Concept , 2001, Information Modeling in the New Millennium.

[7]  Ali Jaafari,et al.  Management of risks, uncertainties and opportunities on projects: time for a fundamental shift , 2001 .

[8]  Mary Sumner,et al.  Risk factors in enterprise-wide/ERP projects , 2000, J. Inf. Technol..

[9]  Ralph L. Kliem.  Risk Management for Business Process Reengineering Projects , 2000, Inf. Syst. Manag..

[10]  N. Godwin,et al.  Riverfest: Managing Risk and Measuring Performance at Little Rock's Annual Music and Arts Festival , 2000 .

[11]  Sheue-Ling Hwang,et al.  Task Analysis for Industrial Work Process from Aspects of Human Reliability and System Safety , 1999 .

[12]  George Apostolakis,et al.  Context in the Risk Assessment of Digital Systems , 1999 .

[13]  Terry R. Adler,et al.  Improving Risk Management: Moving from Risk Elimination to Risk Avoidance , 1999, Inf. Softw. Technol..

[14]  August-Wilhelm Scheer,et al.  ARIS - Business Process Frameworks , 1998 .

[15]  William J. Kettinger,et al.  Business process change , 1997 .

[16]  Tor Guimaraes,et al.  Empirically testing the antecedents of BPR success , 1997 .

[17]  Art Gemmer,et al.  Risk Management: Moving Beyond Process , 1997, Computer.

[18]  Dan Remenyi,et al.  Business process re-engineering: some aspects of how to evaluate and manage the risk exposure , 1996 .

[19]  H. Simon,et al.  The sciences of the artificial (3rd ed.) , 1996 .

[20]  Christoph Bussler,et al.  Workflow Management: Modeling Concepts, Architecture and Implementation , 1996 .

[21]  Eric K. Clemons,et al.  Identifying Sources of Reengineering Failures: A Study of the Behavioral Factors Contributing to Reengineering Risks , 1995, J. Manag. Inf. Syst..

[22]  J. March,et al.  Managerial perspectives on risk and risk taking , 1987 .

[23]  R. Belfield.  The process of innovation. , 1977, Science.

[24]  Herbert A. Simon,et al.  The Sciences of the Artificial , 1970 .