Risk Management Model in ITIL

Author(s):  
Sarah Vilarinho ◽  
Miguel Mira da Silva

ITIL is considered a framework of Best Practice guidance for IT Service Management, and it is widely used in the business world. In spite of this, ITIL has some gaps in Risk Management specification. This chapter approaches this problem in ITIL and compares IT risk management in ITIL to other IT Governance Frameworks. Despite ITIL stating that risk should be identified, measured, and mitigated, it is not clear on how to proceed (no concrete process is defined on how to deal with risk). To solve this, the authors propose to map the M_o_R risk management framework in ITIL, mapping every M_o_R process in ITIL, therefore adopting a strong risk management in ITIL, based on concrete guidelines, without changing the framework. In this chapter, the authors summarize the necessary guidelines and show a planning for future work.

2019 ◽  
Vol 4 (1) ◽  
pp. 46-67
Author(s):  
Diah Novianti

Islamic banking such as the other business institution will face different kind of risk that inherent on its main business activity. In business, risk defined as a posibillity an can appear every time, before, when, and after the decision making. Islamic banking faced different risk with the conventional banking, because its uniquenes. Thus, the development of risk management framework in Islamic banking is very important to do, especially in frame of  risk identification, measuring, mitigation and monitoring. This paper will discuss about risk management in Islamic Banking, in theoretically and the implementation of risk management. The scope of this study will include the identification of risk in Islamic Banking, stage of risk management in Islamic Banking, risk management model, and also the devolpment of risk management framework in Islamic Banking.


2015 ◽  
Vol 12 (3) ◽  
pp. 295-303 ◽  
Author(s):  
Riaan Dirkse van Schalkwyk ◽  
Rigard J. Steenkamp

The paper presents a holistic risk management framework based on the core corporate governance principles and best-practice technology for addressing the global NIHL (noise-induced hearing loss) pandemic. While some await the announcement of a pharmaceutical drug therapy for hearing loss treatment and prevention, the challenges of noise control continue. Although preventable, the scenario remains tragic in terms of the statistics provided by the World Health Organisation (WHO). NIHL is among the most critical global health risks in terms of productivity, compensation statistics and noise-related deaths every year. Prevention of hearing loss remains the biggest challenge regardless of the availability of modern technology and best practice hearing conservation programmes (HCPs). An explorative research methodology was used to indicate a framework combining best practice with a diligent (bold) corporate and holistic approach to the NIHL problem. In essence, the paper therefore provides a thorough background to the global NIHL pandemic and presents a holistic risk management framework to address the problem


Author(s):  
Baris Cimen ◽  
Meltem Mutluturk ◽  
Esra Kocak ◽  
Bilgin Metin

Information security has become one of the most important responsibilities of all organizations due to increasing cyber threats. Attackers take advantage of systems vulnerabilities; therefore, system administrators should be aware of potential threats to take necessary actions to protect their organizations and stakeholders. At this point, a risk assessment is needed to discover possible threats for vulnerable systems of the organization and to implement strategies for the business goals. This study proposes a hybrid risk management framework using both qualitative and quantitative methods to analyze risk within organizations and reduce them with practical countermeasures. Based on this framework, case studies have been carried out considering three hypothetical companies identifying possible information security risks, and these risks have been reduced to an acceptable level by applying the proposed risk analysis methodology.


2013 ◽  
Vol 12 (6) ◽  
pp. 603
Author(s):  
Joseph Chisasa ◽  
Jacobus Young

This article assesses the status ofoperational risk management of banks in developing markets in the context ofBasel II. The aim of the article is to determine the extent to which riskmanagement staff is prepared to implement a risk management framework in linewith international best practice. An African commercial bank was examined usingsurvey data collected in July 2010 from 22 employees. The data were analysedusing descriptive statistics. Results obtained indicate knowledge gaps incollecting risk data and the application of risk models as limitations to theimplementation of the framework. The results support the commitment of moretime and financial resources in up-skilling staff if banks in developing marketsare to comply with regulatory requirements as recommended by the Basel Accord.


2022 ◽  
pp. 56-76
Author(s):  
Baris Cimen ◽  
Meltem Mutluturk ◽  
Esra Kocak ◽  
Bilgin Metin

Information security has become one of the most important responsibilities of all organizations due to increasing cyber threats. Attackers take advantage of systems vulnerabilities; therefore, system administrators should be aware of potential threats to take necessary actions to protect their organizations and stakeholders. At this point, a risk assessment is needed to discover possible threats for vulnerable systems of the organization and to implement strategies for the business goals. This study proposes a hybrid risk management framework using both qualitative and quantitative methods to analyze risk within organizations and reduce them with practical countermeasures. Based on this framework, case studies have been carried out considering three hypothetical companies identifying possible information security risks, and these risks have been reduced to an acceptable level by applying the proposed risk analysis methodology.


2020 ◽  
Vol 17 (1) ◽  
pp. 68-77
Author(s):  
V. E. Zaikovsky ◽  
A. V. Karev

Project success depends on the ability to respond to risks and make correct decisions in a timely manner. The project approach provides a better framework for implementing a new management system into the company’s business processes. The risk management framework developed by the company comprises a risk management infrastructure, a set of standards, human resources, and a risk management information system. To improve staff compliance, it is necessary to provide training and to communicate the goals of the project effectively. It is also important to develop a motivation system because well trained and motivated staff are able to work more efficiently.


Sign in / Sign up

Export Citation Format

Share Document