论文信息 - IT risk management framework for business continuity by change analysis of information system

IT risk management framework for business continuity by change analysis of information system

The large-scale and complicated information systems make it difficult to prevent or recover the failures by IT(Information Technology) risks. This paper reports an application of IT risk management to the business continuity. According to our survey, changes of information systems cause new IT risks. So, we propose an IT risk management framework by change analysis of information systems. By applying the proposed framework to the cases of IT risks, it has been confirmed that the proposed framework is useful to prevent IT risks for business continuity.

Masaki Samejima | Hiroshi Yajima

[1] Kwei-Jay Lin,et al. The Design and Implementation of Service Reservations in Real-Time SOA , 2009, 2009 IEEE International Conference on e-Business Engineering.

[2] G. Stoneburner,et al. Risk Management Guide for Information Technology Systems: Recommendations of the National Institute of Standards and Technology , 2002 .

[3] Dawn M. Cappelli,et al. Management and Education of the Risk of Insider Threat (MERIT): System Dynamics Modeling of Computer System Sabotage , 2008 .

[4] Perdita Stevens,et al. Using UML - software engineering with objects and components, Second Edition , 2006, Addison Wesley object technology series.

[5] Gary Stoneburner,et al. SP 800-30. Risk Management Guide for Information Technology Systems , 2002 .

[6] Ross J. Anderson. Security engineering - a guide to building dependable distributed systems (2. ed.) , 2001 .

[7] R. Rogers. Cognitive and physiological processes in fear appeals and attitude change: a revised theory of prote , 1983 .