Risk-Aware Business Process Management - Establishing the Link Between Business and Security

Companies face the challenge to effectively and efficiently perform their business processes as well as to guarantee their continuous operation. To meet the economic requirements, companies predominantly apply business process management concepts. The substantial consideration of robustness and continuity of operations is performed in other domains such as risk or business continuity management. Applying these domains separately, analysis results may significantly differ as valuations from an economic and risk point of view may lead to deviating improvement recommendations. Observing developments in the past years one can see that regulative bodies, the industry as well as the research community laid a special focus on the tighter integration of business process and risk management. Consequently, the integrated consideration of economic, risk and security aspects when analyzing and designing business processes delivers enormous value to achieve these requirements. In this chapter, we present an survey about selected scientific approaches tackling the challenge of integrating economic and risk aspects. Furthermore, we present a methodology enabling the risk-aware modeling and simulation of business processes. Stefan Jakoubi Secure Business Austria, 1040 Vienna, e-mail: [email protected] Simon Tjoa St. Poelten University of Applied Sciences, 3100 St. Poelten e-mail: [email protected] Sigrun Goluch Secure Business Austria, 1040 Vienna, e-mail: [email protected] Gerhard Kitzler Secure Business Austria, 1040 Vienna, e-mail: [email protected]