Abstract

Risk-based regulation and risk governance gain momentum in most sectorial ecosystems, should they be the finance, the healthcare or the telecommunications ecosystems. Although there is a profusion of tools to address this issue at the corporate level, worth is to note that no solution fulfils this function at the ecosystem level yet. Therefore, in this article, the Business Service Ecosystem (BSE) metamodel is semantically extended, considering the Capability as a Service (CaaS) theory, in order to raise the enterprise risk management from the enterprise level up to the ecosystem level. This extension allows defining a concrete ecosystem metamodel which is afterwards mapped with an information system risk management model to support risk governance at the ecosystem level. This mapping is illustrated and validated on the basis of an application case for the Luxembourgish financial sector applied to the most important concepts from the BSE: capability, resource, service and goal.

Highlights

  • Business Service Ecosystems (BSE) are types of enterprise networks which gather enterprises that collaborate to achieve a common systemic goal

  • Given the similarity between the enterprise structure and the ecosystem structure, we propose to extend the fractal organisation approach proposed by Henkel et al and generalise the capability-resource pair from the enterprise level up to the ecosystem level

  • Regarding the risk-based supervision achieved by a regulator, the risk is appraised in a function (1) of the context situation which is bandwidth reduced by distributed denial of service (DDOS) (2) of the value of the network performance resulting of this context which is a network performance reduced by 50%

Read more

Summary

Introduction

Business Service Ecosystems (BSE) are types of enterprise networks which gather enterprises that collaborate to achieve a common systemic goal. The access to the relevant information required to perform risk assessment is guaranteed as it requires knowing the structure and organisation of the entities of the sector, and knowing the cross-entities relationships In this context, managing the ecosystemic risk appears to be a challenging activity which calls upon knowledge from different fields amongst which we identify risk management and enterprise modeling. The second objective of this article is to make use of the extended business service ecosystem and support the regulation of the ecosystem, through a risk-based approach.

Capability-Based Enterprise Modeling
Towards a Capability-Based Business Service Ecosystem Model
Concepts From the Enterprise Modeling Perspective
Concepts From the Context Perspective
Concepts From the Reuse and Variability Perspective
Financial Application Case
Risk Governance and Regulatory Ecosystem
Towards Risk Governance in Business Service Ecosystems
ISO 31000:2009 Risk Model
Mapping Risk Model-Business Service Ecosystem Metamodel
Luxembourg Financial Ecosystem in Normal Situation
Luxembourg Financial Ecosystem Under a DDOS Attack
Risk Management Language
Enterprise Risk Language
Systemic Risk Language
Conclusions and Future Works
Modeling Concerns
Findings
Methodological Concerns

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call

Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.