scholarly journals A Review on Risk Management in Information Systems: Risk Policy, Control and Fraud Detection

Electronics ◽  
2021 ◽  
Vol 10 (24) ◽  
pp. 3065
Author(s):  
Hamed Taherdoost

Businesses are bombarded with great deals of risks, vulnerabilities, and unforeseen business interruptions in their lifetime, which negatively affect their productivity and sustainability within the market. Such risks require a risk management system to identify risks and risk factors and propose approaches to eliminate or reduce them. Risk management involves highly structured practices that should be implemented within an organization, including organizational planning documents. Continuity planning and fraud detection policy development are among the many critically important practices conducted through risk management that aim to mitigate risk factors, their vulnerability, and their impact. Information systems play a pivotal role in any organization by providing many benefits, such as reducing human errors and associated risks owing to the employment of sophisticated algorithms. Both the development and establishment of an information system within an organization contributes to mitigating business-related risks and also creates new types of risks associated with its establishment. Businesses must prepare for, react to, and recover from unprecedented threats that might emerge in the years or decades that follow. This paper provides a comprehensive narrative review of risk management in information systems coupled with its application in fraud detection and continuity planning.


2021 ◽  
Author(s):  
◽  
Ettiene Esterhuizen

<p>Organisations and especially Government departments develop information systems for their own specific needs, due to this Government departments invests a great deal in information systems development and implementation projects. The intention is to save on cost and develop information systems according to their needs and requirements. Unfortunately such projects are vulnerable and subject to a range of risks.  This case study identifies the risk factors involved in information systems development and implementation projects and the risk processes that are in place to mitigate against those risk factors. Furthermore the case study investigates an information systems development and implementation project where four legacy systems were to be merged into one newly developed system. The project was interrupted when an organisational merger resulted in the loss of key members of the governance board and the project team, either through redundancy or being allocated other responsibilities within the organisation. This exposed the project to unpredictable risk which caused the project to head down the path of possible failure.  The case study outlines the project plan, what actually happened and what according to the interviewed participants happened during the project. It is clear that the risk management processes wasn't followed and that wrongful decisions were made during the organisational merger. Unpredictable risks as a result of the merger and the decision to continue the project required a strong governance board, proper project management, proper risk management and the execution of the risk management processes. The lack of governance and project management had a huge impact on the project while the loss of expertise and knowledge added to the risk profile which resulted in further complications to the project. It’s during these situation that a strong governance board and proper project management is needed to make those critical decisions and steer the project towards success.</p>



2019 ◽  
Vol XXII (2) ◽  
pp. 220-227
Author(s):  
Bosneagu R.

any maritime voyage is exposed to sea hazards, natural and artificial dangers, as well as naval accidents and incidents. Maritime risk management issues have so far been relatively predictably connected to: natural disasters, technical faults of ships and naval equipment and human errors. Today, the particular rise in international maritime trade and the use of new technologies in the naval industry are generating new, ever-changing risks. Identifying and counteracting these risks is crucial, as the success or failure of the maritime industry can have important effects on world trade and economy. The main risk trends faced by the maritime industry at present include: natural disasters, emergence of new arctic routes, unmanned ships, autonomous transport, piracy.



2021 ◽  
Author(s):  
◽  
Ettiene Esterhuizen

<p>Organisations and especially Government departments develop information systems for their own specific needs, due to this Government departments invests a great deal in information systems development and implementation projects. The intention is to save on cost and develop information systems according to their needs and requirements. Unfortunately such projects are vulnerable and subject to a range of risks.  This case study identifies the risk factors involved in information systems development and implementation projects and the risk processes that are in place to mitigate against those risk factors. Furthermore the case study investigates an information systems development and implementation project where four legacy systems were to be merged into one newly developed system. The project was interrupted when an organisational merger resulted in the loss of key members of the governance board and the project team, either through redundancy or being allocated other responsibilities within the organisation. This exposed the project to unpredictable risk which caused the project to head down the path of possible failure.  The case study outlines the project plan, what actually happened and what according to the interviewed participants happened during the project. It is clear that the risk management processes wasn't followed and that wrongful decisions were made during the organisational merger. Unpredictable risks as a result of the merger and the decision to continue the project required a strong governance board, proper project management, proper risk management and the execution of the risk management processes. The lack of governance and project management had a huge impact on the project while the loss of expertise and knowledge added to the risk profile which resulted in further complications to the project. It’s during these situation that a strong governance board and proper project management is needed to make those critical decisions and steer the project towards success.</p>



2002 ◽  
Vol 21 (2) ◽  
pp. 39-56 ◽  
Author(s):  
Jean C. Bedard ◽  
Lynford E. Graham

In auditing, risk management involves identifying client facts or issues that may affect engagement risk, and planning evidence-gathering strategies accordingly. The purpose of this paper is to examine whether auditors' identification of risk factors and planning of audit tests is affected by decision aid orientation, i.e., a “negative” focus wherein client risk and its consequences are emphasized, or a “positive” focus where such factors are not emphasized. Specifically, we expect that auditors will identify more risk factors using a negatively oriented risk identification decision aid, but only when engagement risk is relatively high. We address this issue in the context of auditors' knowledge of actual clients, manipulating decision aid orientation as negative or positive in a matched-pair design. Results show that auditors using the negative decision aid orientation identify more risk factors than do those using a positive orientation, for their higher-risk clients. We also find that decisions to apply substantive tests are more directly linked to specific risk factors identified than to direct risk assessments. Further, our results show that auditors with repeat engagement experience with the client identify more risk factors. The findings of this study imply that audit firms may improve their risk management strategies through simple changes in the design of decision aids used to support audit planning.



Author(s):  
Zoe Del Fante ◽  
Nicola Di Fazio ◽  
Adriano Papale ◽  
Paola Tomao ◽  
Fabio Del Duca ◽  
...  

Physical risk assessments allow us to understand work-related critical issues, thus representing a useful tool in risk management strategies. In particular, our study focuses on the identification of already known and emerging physical risks related to necropsy and morgue activities, as well as crime scene investigations. The aim of our study is, therefore, to identify objective elements in order to quantify exposure to such risk factors among healthcare professionals and working personnel. For the research of potentially at-risk activities, data from the Morgue of Policlinico Umberto I Hospital in Rome were used. The scientific literature has been reviewed in order to assess the risks associated with morgue activity. Measurements were performed on previously scheduled days, in collaboration with the activities of different research units. The identified areas of risk were: microclimate; exposure to noise and vibrations; postural and biomechanical aspects of necropsy activities. The obtained results make it possible to detect interindividual variability in exposure to many of the aforementioned risk factors. In particular, the assessment of microclimate did not show significant results. On the contrary, exposure to vibrations and biomechanical aspects of load handling have shown potential risk profiles. For this reason, both profiles have been identified as possible action targets for risk management strategies.





2021 ◽  
Author(s):  
Victor Pickard

A new disinformation age is upon us—or so it seems. But much of what appears to be unprecedent-ed is not new at all. Concerns about misinformation’s effects on democracy are as old as media. The many systemic failures abetting Trump’s ascendance—as well as more recent election- and pandem-ic-related conspiracies—were decades in the making. Yet, our degraded information systems es-caped sufficient scrutiny for so long. Why?



Kybernetes ◽  
2021 ◽  
Vol ahead-of-print (ahead-of-print) ◽  
Author(s):  
Yu Zhang ◽  
Lan Xu

PurposeThis study establishes a risk management system for medical and health care integration projects to address the problem of high-risk potential and a strong correlation between risk factors.Design/methodology/approachA new fuzzy WINGS-G1 model for identifying key risk factors in medical and health care integration projects is proposed by introducing the fuzzy theory and the concept of risk incidence into the Weighted Influence Non-linear Gauge System (WINGS) method.FindingsThe authors analyze the fluidity of project risk factors through complex networks to control direct risks and cut off risk transmission paths to provide a reference for risk control and prevention of medical and health care integration projects.Originality/value(1) The integration of fuzzy theory into the WINGS method solves the problem of strong subjectivity of expert scoring in the traditional WINGS method; (2) By the different probabilities of risk factors, the concept of risk incidence is introduced in the WINGS model, which is more conducive to the identification of the critical risk factors and the rational allocation and utilization of organizational resources; (3) The use of the complex network for risk interactivity analysis fully reflects the dynamic nature of risk factors in medical and health care integration projects.



Author(s):  
NI Latyshevskaya ◽  
VV Mirochnik ◽  
LA Davydenko ◽  
AI Kireeva ◽  
AV Belyaeva

Summary. Introduction: Comprehensive risk management considering behavioral risk factors is a possible way to minimize adverse health effects of occupational factors. The purpose of the study was assess behavioral risk factors and to develop appropriate measures for preventing occupational diseases in oil refinery operators. Materials and methods: The observation groups included crude oil treatment operators of Ritek LLC in the Volgograd Region located in the subarid climatic zone. The first group consisted of 100 workers under the age of 35 while the second group consisted of 106 workers aged 36-60. Previously published studies were used to substantiate priority occupational risk factors for the operators. To assess lifestyle habits, we conducted a questionnaire-based survey and analyzed data in terms of their statistical significance and real controllability using a multidimensional confirmatory factor analysis. Results: We established that the priority occupational health risks of operators in the climatic conditions of the Volgograd Region included labor severity and intensity (3.1) and hot environment (3.2) posing a high occupational risk of disrupting the thermal state (overheating) of workers. We also identified typical behavioral risk factors, the prevalence and quantitative burden of which was age-specific. In the younger age group, bad habits and poor healthcare activity (reluctance to seek medical advice) generated the highest burdens (943 conditional units each) while in the older age group, major burdens were generated by bad habits and malnutrition (849 and 501 units, respectively). The developed mathematical model proved that a comprehensive health risk management for workers exposed to occupational hazards is feasible by correcting certain behavioral risk factors: a 10 % and 50 % decrease in the burden of bad habits and poor healthcare activity led to a 1.1 and 1.5-fold decrease in the extent of health risk, respectively. Conclusion: The study revealed the most significant behavioral risk factors affecting health of oil refinery operators and substantiated options of the most optimal interaction between the elements of the system reducing the overall risk to human health. Comprehensive health risk management based on optimal interaction of system elements (both occupational and behavioral risk factors) reduces health risks for oil refinery operators.



Sign in / Sign up

Export Citation Format

Share Document