Risk analysis of information systems by event process chains

International Journal of Critical Infrastructures

Volumn 1, Issue 2-3, 2005, Pages 247-257

  Mock, Ralf ^a   Corvo, Maurizio ^b  

^a ETH ZURICH   (Switzerland)

^b ZURICH UNIVERSITY OF APPLIED SCIENCES   (Switzerland)

Author keywords

ARIS; Event process chain; FMEA; Information system; Risk analysis

Indexed keywords

COMMUNICATION SYSTEMS; COMPUTER HARDWARE; COMPUTER SOFTWARE; MATHEMATICAL MODELS; PROCESS CONTROL; RISK ASSESSMENT;

ARCHITECTURE INTEGRATED INFORMATION SYSTEN (ARIS); EVENT PROCESS CHAIN (EPC); FAILURE MODE AND EFFECT ANALYSIS (FMEA); INFORMATION SYSTEM; RISK ANALYSIS;

INFORMATION TECHNOLOGY;

EID: 14844322186     PISSN: 14753219     EISSN: None     Source Type: Journal    
DOI: 10.1504/IJCIS.2005.006121     Document Type: Article

References (18)

1. Bundesamt für Sicherheit in der Informationstechnik (1999) IT Baseline Protection Manual, BSI, Bonn.
2. CLÙSIF (1995) La méthode MARION, Club de la Sécurité Informatique Français, Paris.
3. Corvo, M. (2003) Risikoanalytische Ansätze zur Optimierung betrieblicher Informationssysteme, Diploma Thesis, University of Applied Sciences, Zurich.
4. Eberhardt, O. (2003) Gefährdungsanalyse mit FMEA, expert-Verlag, Renningen.
5. Ferstl, O. and Sinz, E.J. (2002) Grundlagen der Wirtschaftsinformatik, 4th ed., Vol. 1, Oldenbourg Verlag, Munich.
6. Gheorghe, A. and Mock, R. (1999) Risk Engineering: Bridging Risk Analysis with Stakeholders Values, Kluwer Academic Publishers, Dordrecht, Boston.
7. Gorry, G.A. and Morton, M.S.S. (1971) 'A framework for management information systems', MIT Sloan Management Review, Vol. 13, No. 1, pp.55-70.
8. IEC (2001) IEC 60812, Ed. 2: Analysis Techniques for System Reliability - Procedure for Failure Mode and Effects Analysis (FMEA), IEC 56/735/CD, 2001-04.
9. ISF (2003) The Standard of Good Practice for Information Security, Information Security Forum, London.
10. ISO (2002) Risk Management - Vocabulary - Guidelines for Use in Standards (ISO/IEC GUIDE 73:2002(E/F)), ISO Copyright office, Geneva.
11. ISO/IEC, ISO/IEC 17799 (2000) Information Technology - Code of Practice for Information Security Management, ISO Copyright Office, Geneva.
12. Mock, R., Möhle, F. and Fischer, A. (2002) 'Risk analysis related issues of IT-systems: case studies in review', PSAM6 - Probabilistic Safety Assessment and Management, Amsterdam, etc., Elsevier Science Ltd., San Juan, Puerto Rico, USA, June 22-28, Vol. 2, pp. 1885-1890.
13. Moses, R. (1992) 'Risk analysis and management', Computer Security Reference Book, Butterworths Heinemann, Oxford, pp.227-263.
14. Rump, F.J. (1999) Geschäftsprozessmanagement auf der Basis ereignisgesteuerter Prozessketten: Formalisierung, Analyse unsführung von EPK's, Teubner Verlag, Stuttgart.
15. Scheer, A.W. (2001) ARIS - Modellierungsmethoden, Metamodelle, Anwendungen, Springer-Verlag, Berlin.
16. Seheer, A.W. (2002) ARIS - Vom Geschäftsprozess zum Anwendungssystem, Springer-Verlag, Berlin.
17. Staud, J. (2001) Geschäftsprozessanalyse, Springer-Verlag, Berlin.
18. Xiong, D. (2003) The Natural Axiom System of Probability Theory, World Scientific Publishing, New Jersey etc.