Integrating Risk Representation at Strategic Level for IT Service Governance: A Comprehensive Framework - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2020

Integrating Risk Representation at Strategic Level for IT Service Governance: A Comprehensive Framework

Abstract

Organizations tend to set and pursuit objectives against an environment which faces levels of uncertainty. The effect of these uncertainties on objectives can be positive (opportunity risk) or/and negative (hazard risk). With every decision made by people within a company, risks are created, modified, updated or deleted. Therefore, the way these decisions are made in terms of change management strategy as well as the information they are based on, influence how objectives are achieved and requirements fulfilled. Despite the importance of risk definition and risk taking at all organizational levels, organizations mostly consider risk at the management and operational levels. Risks nevertheless also need to be considered at the strategic (governance) level because they constitute what hampers an organization to achieve its strategy. This paper focuses on risk at the strategic level and for this purpose it enriches the Model Driven IT Governance (MoDrIGo) framework; the enriched framework allows to evaluate the alignment of business IT services with strategic objectives while balancing this alignment/support with the potential risk at governance level. All in all, the framework is applicable in broader governance scenarios. The relevance of MoDrIGo as starting point to build a risk-aware governance framework (compared to other similar methods) is mainly because of its service-orientation and its focus on software development issues. The enhanced framework thus provides a high-level risk overview that helps organizations to successfully perceive, detect and treat risks when pursuing their objectives.
Fichier principal
Vignette du fichier
500489_1_En_21_Chapter.pdf (489.19 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03434646 , version 1 (18-11-2021)

Licence

Attribution

Identifiers

Cite

Aghakhani Ghazaleh, Yves Wautelet, Manuel Kolp, Samedi Heng. Integrating Risk Representation at Strategic Level for IT Service Governance: A Comprehensive Framework. 13th IFIP WG 8.1 Working Conference on the Practice of Enterprise Modeling (PoEM 2020), Nov 2020, Riga, Latvia. pp.307-322, ⟨10.1007/978-3-030-63479-7_21⟩. ⟨hal-03434646⟩
39 View
20 Download

Altmetric

Share

Gmail Facebook X LinkedIn More