A Model of Maturity for IS Risk Management Case Study
نویسندگان
چکیده
This paper is a continuation of our first paper dedicated to the presentation of the maturity model for information system (IS) risk management (RM). Its objective is to place the model proposed in the first paper on a case study by the assessment of the maturity of risk management for an IS-CRM (IS dedicated to customer relationship management (CRM)). The sequence of the model requires prior definition of an evaluation system incorporating the setting, the measurement and consolidation methods. In our case study we have gone through four steps: definition of studied components, evaluation of control objectives, calculate the maturity levels for each activity of the RM process and calculate the RM process maturity.
منابع مشابه
ITIL-based IT service management maturity model design in health-based organizations (Case Study: City of Tehran)
Today, Information Technology services are considered as valuable resources in all areas. For making Information Technology Management Processes purposeful and efficient in different organizations &ndash as a competitive and strategic advantage (especially in organizations responsible for health care services) &ndash it is necessary to recognize the level of maturity of the organization and rev...
متن کاملA Systems Dynamics Model for Project Management systems of Project-Based Organization
It is obvious that the success of a project-based organization is dependent on its projects. A variety of tools such as the project excellence model, project management maturity models, the earned value method, have been developed in this regard, but there are still delays in projects because the projects have dynamic nature with non-linear relationships and feedback processes during the projec...
متن کاملAn optimal model for Project Risk Response Portfolio Selection (P2RPS) (Case study: Research institute of petroleum industry)
In the real world, risk and uncertainty are two natural properties in the implementation of Mega projects. Most projects fail to achieve the pre-determined objectives due to uncertainty. A linear integer programming optimization model was used in this work to solve a problem in order to choose the most appropriate risk responses for the project risks. A mathematical model, in which work structu...
متن کاملA Prioritization Model for HSE Risk Assessment Using Combined Failure Mode, Effect Analysis, and Fuzzy Inference System: A Case Study in Iranian Construction Industry
The unavailability of sufficient data and uncertainty in modeling, some techniques, and decision-making processes play a significant role in many engineering and management problems. Attain to sure solutions for a problem under accurate consideration is essential. In this paper, an application of fuzzy inference system for modeling the indeterminacy involved in the problem of HSE risk assessm...
متن کاملMethodology based on MCDM for risk management in EPC projects: A Case Study of LPG Storage Tanks Construction
The most important aim of every project is on time completion, budget consideration and reaching the highest possible quality, based on contract. This paper suggests a methodology for risk management in engineering, procurement, and construction (EPC) projects. Risk management enables project teams to perform with minimum deviation from predetermined goals. The proposed methodology identifies a...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
عنوان ژورنال:
- Computer and Information Science
دوره 5 شماره
صفحات -
تاریخ انتشار 2012