ROPE: A methodology for enabling the risk-aware modelling and simulation of business processes

Proceedings of the 15th European Conference on Information Systems, ECIS 2007

Volumn , Issue , 2007, Pages 1596-1607

  Jakoubi, Stefan ^a   Tjoa, Simon ^a   Quirchmayr, Gerald ^b,c  

^a Secure Business Austria   (Austria)

^b UNIVERSITY OF VIENNA   (Austria)

^c UNIVERSITY OF SOUTH AUSTRALIA   (Australia)

Author keywords

Risk management; Risk aware business process management; Risk aware business process modeling; Risk aware business process simulation; Secure business processes; Threat modeling

Indexed keywords

BUSINESS PROCESS; BUSINESS PROCESS MANAGEMENT; BUSINESS PROCESS MODELING; RISK-AWARE BUSINESS PROCESS SIMULATION; THREAT MODELING;

ENTERPRISE RESOURCE MANAGEMENT; INDUSTRY; INFORMATION SYSTEMS; OPTIMIZATION; ROPE; SYSTEMS ENGINEERING;

RISK MANAGEMENT;

EID: 49049093296     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (21)

1. Alberts, C.J., Dorofee, A.J. (2001) "OCTAVE Method Implementation Guideline Version 2.0-Volume 1: Introduction"
2. CERT/CC-Software Engineering Institute Carnegie Mellon Bank of Japan (2003a) Business Continuity Planning at Financial Institutions
3. July Bank of Japan (2003b) Business Continuity Planning at the Bank of Japan, September BCI, NaCTSO
4. London First (2003) Expecting the unexpected-Business continuity in an uncertain world
5. BCI (2005) Good practice Guidelines, 2005. URL http://www.thebci.org, Accessed October 2005
6. BKA (Federal Chancellery Austria)(2004) Österreichisches IT-Sicherheits Handbuch. URL http://www.cio.gv.at/securenetworks/sihb, Accessed December 2006
7. BOC (1996-2004) The BPMS®-Paradigm, URL http://www.boceu.com/bochp. jsp?file=WP-582571cc1ed802de.b05236.f598e2482c.-7f48, Accessed 25 May 2006
8. Brühwiler, B. (2003) Risk Management als Führungsaufgabe- Methoden und Prozesse der Riskobewältigung für Unternehmen, Organisationen, Produkte und Projekte. Haupt Verlag, Bern, Stuttgart
9. Wien BSI (Federal Office for Information Security) (2004) IT-Grundschutz Manual, 2004. URL http://www.bsi.de/english/gshb/manual/download/index.html, Accessed May 2006
10. CERT OCTAVE (2005) URL http://www.cert.org/octave, Accessed October 2005
11. Department of Defense (1980) MIL-STD-1629 A Military standard-Procedures for performing a failure mode effects and critically analysis
12. Dubray, J., J. (2002) A Novel Approach for Modeling Business Process Definitions, URL http://www.ebpml.org/ebpml2.2.doc, Accessed 23 March 2006
13. ISO/IEC 17799:2005 Information technology-Security techniques-Code of practice for information security management, URL http://www.iso.org
14. Jakoubi, S. (2006) A Methodology for the Visualisation of Risks in Business Processes as an Enabler for a Holistic Documentation and Risk Evaluation by means of Simulation for Software Projects (in German), Thesis, University of Vienna
15. Jürjens, J. (2002). UMLsec: Extending UML for Secure Systems Development
16. UML 2002, Dresden, Sept. 30-Oct. 4, 2002, LNCS, Springer-Verlag, URL http://www4.in.tum.de/~umlsec/
17. Karagiannis, D., Junginger, S., Strobl, R. (1996) Introduction to Business Process Management Systems Concepts, Appeared in: Scholz-Reiter, Bernd; Stickel, Eberhard (Eds.): Business Process Modelling. Springer, Berlin et al. 1996. pp. 81-106
18. Röhrig, S. (2003) Using Process Models to Analyse IT Security Requirements. PhD Thesis, University of Zurich, URL http://www.ifi.unizh.ch/ archive/diss/Jahr-2003/index-diss-2003.html#Susanne
19. Scheer, A. W., Keller, G., Nüttgens, M. (1992) Semantische Prozeßmodellierung auf der Grundlage Ereignisgesteuerter Prozeßketten (EPK), in: Scheer, A. W. (Eds.): Veröffentlichungen des Instituts für Wirtschaftsinformatik, Heft 89, Saarbrücken 1992, URL http://www.iwi.unisb. de/nuettgens/Veroef/Artikel/heft089/heft089.pdf
20. Tjoa, S. (2006) A Methodology for the Enhancement of Business Process Modelling by means of Process-oriented Modelling, Evaluation, and Simulation of IT-Infrastructure (in German), Thesis, University of Vienna
21. Wallmüller, E. (2004) Risikomanagement für IT-und Software-Projekte. Carl Hanser Verlag, München Wien