Aligning Risk Management and Compliance Considerations with Business Process Development

Authors:
Martijn Zoet;Richard Welke;Johan Versendaal;Pascal Ravesteyn
Affiliations:
Institute of Information and Computing Science, Utrecht University, Utrecht, The Netherlands 3584;J. Mack Robinson College of Business, Georgia State University, Atlanta, USA 30302;Institute of Information and Computing Science, Utrecht University, Utrecht, The Netherlands 3584;Institute of Information and Computing Science, Utrecht University, Utrecht, The Netherlands 3584
Venue:
EC-Web 2009 Proceedings of the 10th International Conference on E-Commerce and Web Technologies
Year:
2009

Citing 8
Cited 0

Business process change: a study of methodologies, techniques, and tools

MIS Quarterly
Risk Management for IT Projects: How to Deal with Over 150 Issues and Risks

Risk Management for IT Projects: How to Deal with Over 150 Issues and Risks
Operational risk analysis in business processes

BT Technology Journal
Business Process Management: Concepts, Languages, Architectures

Business Process Management: Concepts, Languages, Architectures
Auditing Business Process Compliance

ICSOC '07 Proceedings of the 5th international conference on Service-Oriented Computing
SAP Governance, Risk and Compliance

SAP Governance, Risk and Compliance
Modeling control objectives for business process compliance

BPM'07 Proceedings of the 5th international conference on Business process management
Design science in information systems research

MIS Quarterly

Quantified Score

Hi-index	0.00

Visualization

Abstract

The improvement of business processes, to date, primarily focuses on effectiveness and efficiency, thereby creating additional value for the organization and its stakeholders. The design of processes should also ensure that its result and the value obtained compensates for the risks affecting this value. In this paper the different kinds of risk affecting a business process are introduced, after which solutions to the problem of risk mitigation are discussed, resulting in a proposed framework to mollify these risks by incorporating a class of risk-mitigation rules into business process development.