Enhancing business impact analysis and risk assessment applying a risk-aware business process modeling and simulation methodology

ARES 2008 - 3rd International Conference on Availability, Security, and Reliability, Proceedings

Volumn , Issue , 2008, Pages 179-186

  Tjoa, Simon ^a   Jakoubi, Stefan ^a   Quirchmayr, Gerald ^b  

^a Secure Business Austria   (Austria)

^b UNIVERSITY OF VIENNA   (Austria)

Author keywords

Business continuity planning; Business impact analysis; Risk assessment; Risk aware business process simulation

Indexed keywords

DISASTERS; ENTERPRISE RESOURCE MANAGEMENT; RISK ANALYSIS; RISK MANAGEMENT; ROPE; SAFETY ENGINEERING;

BUSINESS ACTIVITIES; BUSINESS CONTINUITY; BUSINESS CONTINUITY PLANNING; BUSINESS IMPACT; BUSINESS IMPACT ANALYSIS; BUSINESS PROCESS MANAGEMENT; BUSINESS PROCESS MODELING; INTERNATIONAL CONFERENCES; NATURAL DISASTERS; ORIENTED PROCESS; RISK-AWARE BUSINESS PROCESS SIMULATION; SIMULATION CAPABILITIES;

RISK ASSESSMENT;

EID: 49049094901     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2008.206     Document Type: Conference Paper

References (22)

1. Government Office for the North East, "Business continuity," http://www.gos.gov.uk/gone/prepforemergencies/preparedness/bus-continuity, 2007, accessed August 2007.
2. Bank Of Japan, "Business Continuity Planning at Financial Institutions," July 2003.
3. _, "Business Continuity Planning at the Bank of Japan," September 2003.
4. BC1, NaCTSO, and L. First, "Expecting the unexpected - Business continuity in an uncertain world," 2003.
5. C. Alberts and A. Dorofee, "OCTAVE Method Implementation Guideline Version 2.0 - Volume 1: Introduction," 2001.
6. British Standards Institution, "Bs 25999," http://www.bsonline. bsi-global.com/server/index.jsp, 2006.
7. BSI (Federal Office for Information Security), "IT-Grundschutz Manual (english version)," 2004. [Online], Available: http://www.bsi.de/ english/gshb/manual/download/index, html
8. Business Continuity Institute, "Good Practice Guidelines," http://www.thebci.org/gpgdownloadpage.htm, 2007. [Online], Available: http://www.thebci.org
9. CERT, "OCTAVE," 2005. [Online]. Available: http://www.cert.org/ octave
10. National Institute of Standards and Technology, "Nist sp800-34: Contingency planning guide for information technology systems," 2002. [Online]. Available: http://csrc.nist.gov/publications/nistpubs/
11. BOC, "Business process management systems (bpms) paradigm," 2007. [Online]. Available: http://www.boc-eu.com/jumpto.jsp?goto=BPMS\&lg=en
12. D. Karagiannis, S. Junginger, and R. Strobl, Business Process Modelling. Springer, Berlin, 1996, ch. Introduction to Business Process Management Systems Concepts, pp. 81-106.
13. A. W. Scheer, G. Keller, and M. Niittgens, "Semantische Prozesßmodellierung auf der Grund-lage Ereignisgesteuerter Prozesßketten (EPK)," Veröffentlichungen des Institute für Wirtschaftsin-formatik, Heft 89, Saarhrücken, 1992. [Online]. Available: http://www.iwi.uni-sb.de/nuettgens/Veroef/Artikel/heft089/heft089.pdf
14. S. Jakoubi, S. Tjoa, and G. Quirchmayr, "ROPE: A Methodology for Enabling the Risk-Aware Modelling and Simulation of Business Processes," in ECIS, 15th European Conference on Information Systems, 2007.
15. G. Goluch, A. Ekelhart, S. Fenz, S. Jakoubi, S. Tjoa, and T. Mück, "Integration of an ontological information security concept in risk aware business process management," in 41st Hawaii International Conference on System Sciences, HICSS2008. Waikoloa, HI, USA: IEEE Computer Society, January 2008.
16. National Fire Protection Association, "Nfpa 1600:2007 - standard on disaster/emergency management and business continuity programs," 2007.
17. British Standards Institution, "Pas56," 2003.
18. Distaster Recovery Institute and Disaster Recovery Journal, "Generally accepted business continuity practises," http://www.drj.com/GAP/, 2007, accessed September 2007.
19. National Institute of Standards and Technology, "Nist sp800-30: Risk management guide for information technology systems," 2002. [Online], Available: http://csrc.nist.gov/publications/nistpubs/
20. _, "Nist sp800-26: Security self-assessment guide for information technology systems," 2001. [Online]. Available: http://csrc.nist.gov/ publications/nistpubs/
21. _, "Revised nist sp 800-26 system questionnaire with nist sp 800-53 references and associated security control mappings," 2005. [Online]. Available: http://csrc.nist.gov/publications/nistpubs/
22. J. Burtles, "Principles and practice of business continuity," Rothstein Associates Inc. ISBN 1-931332-39-8, 2007.