Identification Of Relevant Risks Research Articles

Перспективы создания универсального IT-аутсорсера на рынке банковских услуг и проблемы минимизации рисков в корпоративной сфере

In the article, the author refers to the analysis of foreign and Russian regulatory, policy documents, legislative initiatives in order to identify the risks of IT outsourcing in the banking services market. Based on the identification of relevant risks, the concept of a legal model of a universal IT outsourcer in the relevant market is proposed with a detailed analysis of ways to minimize risks in the corporate sphere for such an integrated company.

COMMUNICATION MANAGEMENT IN SOCIAL TRANSPARENCY RISKS MANAGEMENT OF ENTERPRISE INFORMATION SYSTEMS

One of the areas of improvement of communicative management tools in the conditions of modern challenges is the relevant provision of actual changes in the formats of work organization. Remote work and mixed formats of work are gaining popularity. Remote work means using information and communication technologies to work outside the workplace. The Covid-19 crisis and the full-scale war in Ukraine have led to an increase in the use of social media tools in enterprises. The directions of their use control, inform, and coordinate cooperation between employees. In such conditions, communicative management must consider not only the requirements but also the risks of social transparency. Transparency is one of the aspects of corporate social responsibility at the organizational level, which is intended to contribute to the growth of the efficiency and productivity of the enterprise. Social transparency is carried out through social networks or corporate social software, refers to the voluntary sharing of personal and contextual information, such as information about their own and team status, intentions, motivations, capabilities, priorities, goals, updates of physical and social information, contacts with others colleagues. Social transparency practices can create risks such as information overload, professional burnout, and stress. There is a lack of systematic communication management methods that would identify and assess the risks of social transparency. In the presented study, we substantiate the method of identification and assessment of such risks at enterprises. An appropriate algorithm for the method of identification and assessment of such risks in the organizational context has been developed. As a result of the research, a specific toolkit of communicative management is proposed for the study of potential risks of social transparency in corporate information systems in the conditions of social transparency. The use of such tools in the practical activities of enterprises will improve the validity of management decisions in the context of the transparency of corporate information systems based on the identification of relevant risks and their prioritization.

Risk Analysis and Control of Personal Data Protection in the Population Administration Information System

Sistem Informasi Administrasi Kependudukan (SIAK) is an application used in managing personal data of residents in all cities/districts in Indonesia. Personal data becomes the public attention because if it is not managed properly it will have an impact on one's legal protection and non-compliance with regulations, i.e. Permenkominfo Nomor 20 tahun 2016 about Protection of Personal Data in the Electronic System. Risk analysis and control of personal data protection on SIAK applications are needed so that the personal data management can be carried out properly and comply with regulatory requirements. Data collected for this study are primary data, sourced from direct observations on the application, interview about assets related to SIAK along with possible risks, and also internal organizations documents. Data analysis was performed with a risk analysis using the ISO 31000: 2018 risk management process approach, where the identification of relevant risks refers to the Generic Risk Scenarios COBIT 5 For Risk, and the determination of relevant controls refers to the Department of Defense Instruction 8500.2 and NIST 800-53. This research involves the Head of Department and employees of Disdukcapil XYZ City that are related to the strategic and operational aspects of SIAK. The results of this study are the identification of 23 possible risks that are spread over 5 processes of personal data protection that classified into the medium-high risk level, and proposed risk control consisting of 19 preventive controls, 6 detective controls, and 2 corrective control.

Event-based risk management for subsurface risks: An approach to protect value generation from oil and gas fields

ABSTRACT Event-based risk management (EBRM) is an improved way of describing subsurface uncertainties and their possible business impacts in a manner that facilitates specific actions to improve business performance. In EBRM, uncertainties are viewed as potential causes of risk events that could in turn lead to consequences that affect the attainment of objectives. This “causes–event–consequences” syntax aids the design of prevention measures to inhibit the causes turning into the event and mitigation measures to reduce the potential consequences should the risk event occur, and it also facilitates construction of a risk taxonomy scheme based on risk consequences, events, and causes. Using a data set of 1456 subsurface risks, each risk was described in this manner and placed in the taxonomy, and the proportion of risks in each taxonomic group was analyzed. This revealed clear trends in the relative frequency of risk groups with type of field: for example, risks related to hydrocarbon-in-place volumes are more frequently identified in deep-water oil fields and gas fields feeding liquefied natural gas plants, situations in which resource volumes are critical to support the large project capital costs. Trends were also evident with field maturity: for example, risks related to hydrocarbon-in-place volumes are more frequently identified before the field sanction decision than afterward. Several benefits have yielded from EBRM: the risk description syntax encourages the creation of meaningful risk-management actions, the taxonomy and associated risk identification frequencies assist the identification of relevant risks so that key risk areas are not overlooked and also help to anticipate future risks, and the focus on risks (rather than uncertainties) helps to focus resources (data acquisition, technical studies) onto those aspects of the subsurface that are likely to impact business outcomes.

Identification of Relevant Risks in Abandoned Housing Projects in Malaysia: A Qualitative Study

In 2010, it was reported that there are over 45,339 units of abandoned houses in the state of Selangor, Malaysia. This is situation has brought adverse implication to house buyers and the national housing delivery system. The aim of this study is to identify the relevant risks in managing abandoned housing project and formalized the ways to manage these risks. To achieve this end, a semi-structured interview will be conducted. The sample of this study is obtained from the on-going and completed abandoned projects managed by the Syarikat Perumahan Negara Berhad (SPNB), a wholly owned company of the Ministry of Finance. The expected finding is the identification of relevant risks pertaining to abandoned project and the ways to manage these risks. The finding provides two contributions. First is the contribution to the additional knowledge on risk management in reviving abandoned projects. Second is that this study provides insights to the governing agencies on how to manage the risk of completing abandoned project. It is envisaged that the identification of the relevant risks would furnish preliminary inputs required to further develop the framework of risk of abandoned project undertaken by SPNB and other similar entities.

An Evolutionary Approach to Realism-based Adverse Event Representations

Part of the ReMINE project involved the creation of an ontology enabling computer-assisted decision support for optimal adverse event management. The ontology was required to satisfy the following requirements: 1) to be able to account for the distinct and context-dependent ways in which authoritative sources define the term 'adverse event', 2) to allow the identification of relevant risks against patient safety (RAPS) on the basis of the disease history of a patient as documented in electronic health records, and 3) to be compatible with present and future ontologies developed under the Open Biomedical Ontology (OBO) Foundry framework. We used as feeder ontologies the Basic Formal Ontology, the Foundational Model of Anatomy, the Ontology for General Medical Science, the Information Artifact Ontology and the Ontology of Mental Health. We further used relations defined according to the pattern set forth in the OBO Relation Ontology. In light of the intended use of the ontology for the representation of adverse events that have actually occurred and therefore are registered in a database, we also applied the principles of referent tracking. We merged the upper portions of the mentioned feeder ontologies and introduced 22 additional representational units of which 13 are generally applicable in biomedicine and nine in the adverse event context. We provided for each representational unit a textual definition that can be translated into equivalent formal definitions. The resulting ontology satisfies all of the requirements set forth. Merging the feeder ontologies, although all designed under the OBO Foundry principles, brought new insight into what the representational units of such ontologies actually denote.