Information risks management in supply chains: An assessment and mitigation framework

Journal of Enterprise Information Management

Volumn 20, Issue 6, 2007, Pages 677-699

  Faisal, Mohd Nishat ^a   Banwet, D K ^a   Shankar, Ravi ^a  

^a INDIAN INSTITUTE OF TECHNOLOGY DELHI   (India)

Author keywords

Graph theory; Information management; Risk management; Supply chain management

Indexed keywords

EID: 35548986219     PISSN: 17410398     EISSN: None     Source Type: Journal    
DOI: 10.1108/17410390710830727     Document Type: Article

References (72)

1. Abouzakhar, N.S. and Manson, G.A. (2002), "An intelligent approach to prevent distributed systems attacks", Information Management and Computer Security, Vol. 10 No. 5, pp. 203-9.
2. Aven, T., Vinnem, J.E. and Wiencke, H.S. (2007), "A decision framework for risk management, with application to the offshore oil and gas industry", Reliability Engineering and System Safety, Vol. 92, pp. 433-48.
3. Bahli, B. and Rivard, S. (2005), "Validating measures of information technology outsourcing risk factors", Omega, Vol. 33 No. 2, pp. 175-87.
4. Barthélemy, J. (2003), "The hard and soft sides of IT outsourcing management", European Management Journal, Vol. 21 No. 5, pp. 539-48.
5. Bender, P.S. (2000), "Debunking five supply chain myths", Supply Chain Management Review, Vol. 4 No. 1, pp. 52-8.
6. Bertolini, M., Bevilacqua, M., Bottani, E. and Rizzi, A. (2004), "Requirements of an ERP enterprise modeller for optimally managing the fashion industry supply chain", Journal of Enterprise Information Management, Vol. 17 No. 3, pp. 180-90.
7. Biehl, M. (2005), "Selecting internal and external supply chain functionality: the case of ERP systems versus electronic marketplaces", Journal of Enterprise Information Management, Vol. 18 No. 4, pp. 441-57.
8. Bolaos, R., Fontela, E., Nenclares, A. and Pastor, P. (2005), "Using interpretive structural modelling in strategic decision-making groups", Management Decision, Vol. 43 No. 6, pp. 877-95.
9. Brandyberry, A. and White, G.P. (1999), "Intermediate performance impacts of advanced manufacturing technology systems: an empirical investigation", Decision Sciences, Vol. 30 No. 4, pp. 993-1020.
10. Búrca, S-d., Fynes, B. and Marshall, D. (2005), "Strategic technology adoption: extending ERP across the supply chain", Journal of Enterprise Information Management, Vol. 18 No. 4, pp. 427-40.
11. Cardinali, R. (1998), "If the system fails, who is liable?", Logistics Information Management, Vol. 11 No. 4, pp. 257-61.
12. Chen, W.K. (1997), Graph Theory and its Engineering Applications: Advanced Series in Electrical and Computer Engineering, University of Illinois, Chicago, IL.
13. Chopra, S. and Sodhi, M.S. (2004), "Managing risk to avoid supply chain breakdown", Sloan Management Review, Vol. 46 No. 1, pp. 53-61.
14. Choy, K.L., Lee, W.B. and Lo, V. (2004), "An enterprise collaborative management system: a case study of supplier relationship management", Journal of Enterprise Information Management, Vol. 17 No. 3, pp. 191-207.
15. Christopher, M. (2000), "The agile supply chain competing in volatile markets", Industrial Marketing Management, Vol. 29 No. 1, pp. 37-44.
16. Christopher, M. and Lee, H. (2004), "Mitigating supply chain risk through improved confidence", International Journal of Physical Distribution & Logistics Management, Vol. 34 No. 5, pp. 388-96.
17. Collins, J. and Millen, R. (1995), "Information systems outsourcing by large American industrial firms: choices and impacts", Information Resources Management Journal, Vol. 8 No. 1, pp. 5-13.
18. Cullen, S., Seddon, P.B. and Willcocks, L.P. (2005), "IT outsourcing configuration: research into defining and designing outsourcing arrangements", The Journal of Strategic Information Systems, Vol. 14 No. 4, pp. 357-87.
19. Davenport, T.H. and Brooks, J.D. (2004), "The enterprise systems and the supply chain", Journal of Enterprise Information Management, Vol. 17 No. 1, pp. 8-19.
20. Dennis, M.J. and Kambil, A. (2003), "Service management: building profits after the sale", Supply Chain Management Review, Vol. 7 No. 1, pp. 42-8.
21. Earl, M.J. (1996), "The risks of outsourcing IT", Sloan Management Review, Vol. 37 No. 3, pp. 26-32.
22. Faisal, M.N., Banwet, D.K. and Shankar, R. (2006a), "Supply chain risk mitigation: modeling the enablers", Business Process Management Journal, Vol. 12 No. 4, pp. 535-52.
23. Faisal, M.N., Banwet, D.K. and Shankar, R. (2006b), "Mapping supply chains on risk and customer sensitivity dimensions", Industrial Management & Data Systems, Vol. 106 No. 6, pp. 878-95.
24. Fiala, P. (2005), "Information sharing in supply chains", Omega, Vol. 33 No. 5, pp. 419-23.
25. Fisher, M.L. (1997), "What is the right supply chain for your product?", Harvard Business Review, Vol. 75 No. 2, pp. 105-16.
26. Ford, R. and Ray, H. (2004), "Googling for gold: web crawlers, hacking and defence explained", Network Security, Vol. 2004 No. 1, pp. 10-13.
27. Ganguli, P. (2000), "Intellectual property rights: mothering innovations to markets", World Patent Information, Vol. 22 Nos 1/2, pp. 43-52.
28. Halchin, L.E. (2004), "Electronic government: government capability and terrorist resource", Government Information Quarterly, Vol. 21 No. 4, pp. 406-19.
29. Hallikas, J., Karvonen, I., Pulkkinen, U., Virolainen, V.M. and Tuominen, M. (2004), "Risk management processes in supplier networks", International Journal of Production Economics, Vol. 90 No. 1, pp. 47-58.
30. Handfield, R.B. and Nichols, E.L. (1999), Introduction to Supply Chain Management, Prentice-Hall, Upper Saddle River, NJ.
31. Harary, F. (1985), Graphs and Organizations, Wiley, New York, NY.
32. Harland, C., Brenchley, R. and Walker, H. (2003), "Risk in supply networks", Journal of Purchasing and Supply Management, Vol. 9 No. 2, pp. 51-62.
33. Hoyt, J. and Huq, F. (2000), "From arms-length to collaborative relationships in the supply chain", International Journal of Physical Distribution & Logistics Management, Vol. 30 No. 9, pp. 750-64.
34. Irani, Z. (2002), "Information systems evaluation: navigating through the problem domain", Information & Management, Vol. 40 No. 1, pp. 11-24.
35. Irani, Z., Sharif, A., Love, P.E.D. and Kahraman, C. (2002), "Applying concepts of fuzzy cognitive mapping to model: the IT/IS investment evaluation process", International Journal of Production Economics, Vol. 75 Nos 1/2, pp. 199-211.
36. Jense, J.B. and Gutin, G. (2000), Digraph Theory, Algorithms, and Organizations, Springer, London.
37. Jharkharia, S. and Shankar, R. (2005), "IT enablement of supply chains: understanding the barriers", Journal of Enterprise Information Management, Vol. 18 No. 1, pp. 11-27.
38. Kern, T. and Willcocks, L. (2000), "Exploring information technology outsourcing relationships: theory and practice", The Journal of Strategic Information Systems, Vol. 9 No. 4, pp. 321-3.
39. Khalfan, A.M. (2004), "Information security considerations in IS/IT outsourcing projects: a descriptive case study of two sector", International Journal of Information Management, Vol. 24 No. 1, pp. 29-42.
40. Kilpatrick, J. and Factor, R. (2000), "Logistics in Canada survey: tracking year 2000 supply chain issues and trends", Materials Management and Distribution, Vol. 45 No. 1, pp. 16-20.
41. Kirchmer, M.E. (2004), "E-business process networks - successful value chains through standards", Journal of Enterprise Information Management, Vol. 17 No. 1, pp. 20-30.
42. Kucera, K., Plaisent, M., Bernard, P. and Maguiraga, L. (2005), "An empirical investigation of the prevalence of spyware in internet shareware and freeware distributions", Journal of Enterprise Information Management, Vol. 18 No. 6, pp. 697-708.
43. Lacity, M.C. and Hirschheim, L. (1993), "The information systems outsourcing bandwagon", Sloan Management Review, Vol. 35 No. 1, pp. 73-86.
44. Lee, H.L., Padmanabham, V. and Whang, S. (1997), "The bullwhip effect in supply chains", Sloan Management Review, Vol. 38 No. 3, pp. 93-102.
45. Lee, H.L., So, K.C. and Tang, C.S. (2000), "The value of information sharing in a two-level supply chain", Management Science, Vol. 46 No. 5, pp. 626-43.
46. Lewis, I. and Talalayevsky, A. (2004), "Improving the interorganizational supply chain through optimization of information flows", Journal of Enterprise Information Management, Vol. 17 No. 3, pp. 229-37.
47. Maguire, S. (2002), "Identifying risks during information system development: managing the process", Information Management & Computer Security, Vol. 10 No. 3, pp. 126-34.
48. Mandal, A. and Deshmukh, S.G. (1994), "Vendor selection using interpretive structural modeling (ISM)", International Journal of Operations & Production Management, Vol. 14 No. 6, pp. 52-9.
49. Motwani, J., Madan, M. and Gunasekaran, A. (2000), "Information technology in managing global supply chains", Logistics Information Management, Vol. 13 No. 5, pp. 320-7.
50. Møller, C. and ERP,. II: (2005), "ERP II: a conceptual framework for next-generation enterprise systems?", Journal of Enterprise Information Management, Vol. 18 No. 4, pp. 483-97.
51. Norrman, A. and Jansson, U. (2004), "Ericsson's proactive supply chain risk management approach after a serious sub-supplier accident", International Journal of Physical Distribution & Logistics Management, Vol. 34 No. 5, pp. 434-56.
52. Rao, R.V. and Padmanabhan, K.K. (2006), "Selection, identification and comparison of industrial robots using digraph and matrix methods", Robotics and Computer-Integrated Manufacturing, Vol. 22 No. 4, pp. 373-83.
53. Ravi, V., Shankar, R. and Tiwari, M.K. (2005), "Productivity improvement of a computer hardware supply chain", International Journal of Productivity and Performance Management, Vol. 54 No. 4, pp. 239-55.
54. Ritchie, B. and Brindley, C. (2000), "Disintermediation, disintegration and risk in the SME global supply chain", Management Decision, Vol. 38 No. 8, pp. 575-83.
55. Sabki, A., Ahmed, P.K. and Hardaker, G. (2004), "The developing an e-commerce solution: a case study of TimeXtra", Journal of Enterprise Information Management, Vol. 17 No. 5, pp. 388-401.
56. Sage, A.P. (1977), Interpretive Structural Modeling: Methodology for Large-scale Systems, McGraw-Hill, New York, NY.
57. Schumacker, R.E. and Lomax, R.G. (1996), A Beginner's Guide to Structural Equation Modeling, Lawrence Erlbaum Associates, Pittsburgh, PA.
58. Sharif, A.M. and Irani, Z. (1999), "Research note: theoretical optimisation of IT/IS investments", Logistics Information Management, Vol. 12 Nos 1/2, pp. 189-96.
59. Shore, B. and Venkatachalam, A.R. (2003), "Evaluating the information sharing capabilities of supply chain partners: a fuzzy logic model", International Journal of Physical Distribution & Logistics Management, Vol. 33 No. 9, pp. 804-24.
60. Simatupang, T.M. and Sridharan, R. (2004), "Benchmarking supply chain collaboration: an empirical study", Benchmarking: An International Journal, Vol. 11 No. 5, pp. 484-503.
61. Sinha, P.R., Whitman, L.E. and Malzahn, D. (2004), "Methodology to mitigate supplier risk in an aerospace supply chain", Supply Chain Management: An International Journal, Vol. 9 No. 2, pp. 154-68.
62. Speckman, R.E. and Davis, E.W. (2004), "Risky business: expanding the discussion on risk and the extended enterprise", International Journal of Physical Distribution & Logistics management, Vol. 34 No. 5, pp. 414-33.
63. Stockdale, R. and Standing, C. (2004), "Benefits and barriers of electronic marketplace participation: an SME perspective", Journal of Enterprise Information Management, Vol. 17 No. 4, pp. 301-11.
64. Sutton, S.G. (2006), "Extended-enterprise systems' impact on enterprise risk management", Journal of Enterprise Information Management, Vol. 19 No. 1, pp. 97-114.
65. Tang, C.S. (2006), "Perspectives in supply chain risk management", International Journal of Production Economics, Vol. 103 No. 2, pp. 451-88.
66. Walden, E.A. and Hoffman, J.J. (2007), "Organizational form, incentives and the management of information technology: opening the black box of outsourcing", Computers & Operations Research, Vol. 34, pp. 3575-91.
67. Warfield, J.W. (1974), "Developing interconnected matrices in structural modeling", IEEE Transactions on Systems Men and Cybernetics, Vol. 4 No. 1, pp. 51-81.
68. Whipple, J.M., Frankel, R. and Daugherty, P.J. (2002), "Information support for alliances: performance implications", Journal of Business Logistics, Vol. 23 No. 2, pp. 67-81.
69. White, A., Daniel, E.M. and Mohdzain, M. (2005), "The role of emergent information technologies and systems in enabling supply chain agility", International Journal of Information Management, Vol. 25 No. 5, pp. 396-410.
70. Willcocks, L.P., Lacity, M.C. and Kern, T. (1999), "Risk mitigation in IT outsourcing strategy revisited: longitudinal case research at LISA", The Journal of Strategic Information Systems, Vol. 8 No. 3, pp. 285-314.
71. Yusuf, Y.Y., Gunasekaran, A., Adeleye, E.O. and Sivayoganathan, K. (2004), "Agile supply chain capabilities: determinants of competitive objectives", European Journal of Operational Research, Vol. 159 No. 2, pp. 379-92.
72. Zhang, R. and Chen, K. (2005), "Improvements on the WTLS protocol to avoid denial of service attacks", Computers and Security, Vol. 24 No. 1, pp. 76-82.