We develop a Bayesian multivariate analysis of expert judgment elicited using an extended form of pair-wise comparisons. The method can be used to estimate the effect of multiple factors on the probability of an event and can be applied in risk analysis and other decision problems. The analysis provides variance predictions of the quantity of interest that incorporate dependencies amongst the v...

This study examines how the risk-taking incentive of top executives drives the strategic risk-taking in corporate IT implementation. We use the risk incentive provided in executive compensation to capture top executives’ risk-taking incentive, and develop measures of aggressive IT implementation to capture strategic risk-taking in IT implementation. Our analysis provides empirical evidence that...

The worldwide concern with corporate governance concerns itself, inter alia, with the risks that an organisation faces; for many, IT is significant among those risks. This paper examines the audit approach, and others, to dealing with risks in IT-based systems. This paper summarises the findings of research in IT-related areas of risk and then draws together a charter for IT governance that mee...

Social cost–benefit analysis is a well-established method for guiding decisions about safety investments, particularly in situations in which it is possible to make accurate predictions of future performance. However, its direct applicability to situations involving large degrees of uncertainty is less obvious and this raises the question of the extent to which social cost–benefit analysis can ...

In this paper we discuss a rigorous foundation of similarity reasoning based on the concept of utility. If utility is formulated in mathematical terms it can serve as a formal specification for a similarity system. However, utility can also be formulated in informal ways. We consider subjective versions, competing ones and those that change dynamically over time. These are illustrated by exampl...

It is increasingly recognized that business models offer an abstraction that is useful not only in the exploration of new business networks but also for the design and redesign of operational business processes. Among others, they can be used as input for a risk analysis that is crucial in cross-organizational business process design. However, the notion of value object is up till now not clear...

Injury prevention is one of the most important and urgent issues in children’s health since the primary cause of death of children is unintentional injury. Injury prevention requires making safe products as well as safe environments by evaluating the risks. This paper proposes a system for presenting and evaluating potential risk of injury by using a biomechanical simulation based on bodygraphi...

Derivatives exposures across large financial institutions often contribute to – if not necessarily create – systemic risk. Current reporting standards for derivatives exposures are nevertheless inadequate for assessing these systemic risk contributions. In this paper, the author explains how a transparency standard, in contrast to the current standard, would facilitate such risk analysis. He al...

The authors employ a seeded, ranking type Delphi to answer the following research question: how do each of the major stakeholder groups within organizations (representing both strategic and operational levels) conceptualize the risks associated with IT in operations? Using three expert panels drawn from Big 4 IT audit groups and Fortune 1000 business/IT managers, we identify the IT risks most s...

This research in progress paper introduces a research initiative focusing on bank employee risk behaviour to mitigate IT operational risks in Austrian banks. The study focuses on the role of IT risk culture and internal controls in relation to employee risk behaviour and the effectiveness of different awareness building practices in banking companies in response to international banking regulat...