Incorporating risk into business process models

IBM Journal of Research and Development

Volumn 54, Issue 3, 2010, Pages

  Cope, Eric W ^a   Küster, Jochen Malte ^a   Etzweiler, Dominik ^b   Deleris, Léa A ^c   Ray, Bonnie ^a  

^a IBM RESEARCH ZURICH   (Switzerland)

^b Bain and Company Inc   (Switzerland)

^c IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BUSINESS PROCESS; BUSINESS PROCESS MODEL; BUSINESS PROCESS MODELING; COMPREHENSIVE INFORMATION; CONCEPTUAL FRAMEWORKS; CORE ACTIVITY; ENTERPRISE RISK MANAGEMENT; META MODEL; OPERATIONAL RISKS; PROCESS MODEL; PROCESS MODELING LANGUAGE; STEP-BY-STEP;

RISK MANAGEMENT;

EID: 77955072995     PISSN: 00188646     EISSN: 00188646     Source Type: Journal    
DOI: 10.1147/JRD.2010.2045777     Document Type: Article

References (42)

1. IT Governance Institute, CobiT 4.1. Rolling Meadows, IL: ISA, 2007.
2. Committee of Sponsoring Organizations of the Treadway Commission (COSO), Enterprise Risk ManagementVIntegrated Framework. New York: AICPA, 2004
3. R. J. Chapman, Simple Tools and Techniques for Enterprise Risk Management. Hoboken, NJ: Wiley, 2006.
4. ORX Association. (2007, May). ORX Operational Risk Report. [Online]. Available: http://www.orx.org
5. Sarbanes-Oxley Act of 2002, Pub. L. No.107-204, 116 Stat. 745, Jul. 30, 2002.
6. Health Insurance Portability and Accountability Act of 1996 (HIPAA), Pub. L. No.104-191, 110 Stat. 1936, Aug. 1996.
7. D. H. Stamatis, Failure Mode and Effect Analysis: FMEA From Theory to Execution, 2nd ed. Milwaukee, WI: ASQ Quality Press, 2003.
8. T. A. Kletz, HAZOP and HAZAN, 4th ed. Boca Raton, FL: CRC Press, 1999.
9. United States Food and Drug Administration. (1997, Aug. 14). Hazard Analysis and Critical Control Point Principles and Application Guidelines. [Online]. Available: http://vm.cfsan.fda. gov/~comm/nacmcfp.html
10. Object Management Group (OMG). (2008). Business Process Modeling Notation, V1.1, OMG Document Number: Formal/2008-17. [Online]. Available: http://www.omg.org/spec/BPMN/1.1/PDF
11. J. Recker, BOpportunities and constraints: The current struggle with BPMN,[ Bus. Process Manage. J., vol. 16, no. 1, pp. 181-201, 2010.
12. E. W. Cope, J. Küster, D. Etzweiler, L. Deleris, and B. Ray, BRisk extensions to the BPMN 1.1 process metamodel,[ IBM, Yorktown Heights, NY, Res. Rep. RZ3740, 2009.
13. X. Kefan, L. Jieming, and C. Yun, BA theoretical and empirical analysis of risk management in business process,[ in Proc. 3rd Int. Conf. WiCom, Shanghai, China, Sep. 21-25, 2007, pp. 6509-6512.
14. M. Heravizadeh, J. Mendling, and M. Rosemann, BDimensions of business process quality (QoBP),[ in Proc. 6th Int. Conf. BPM Workshops, Milan, Italy. Springer-Verlag, Sep. 1, 2008, vol. 5240, LNCS, pp. 80-91.
15. D. Etzweiler, BIntegration of operational risk modeling in business process models,[ M.S. thesis, School Comput. Commun. Sci., Swiss Federal Inst. Technol. (EPFL), Lausanne, Switzerland, Feb. 2007.
16. C. Supatgiat, C. Kenyon, and L. Heusler, BCause-to-effect operational-risk quantification and management,[ Risk Manage., vol. 8, no. 1, pp. 16-42, Feb. 2006.
17. A. Sienou, E. Lamine, A. Karduck, and H. Pingaud, BConceptual model of risk: Towards a risk modelling language,[ in Proc. WISE Workshops, M. Weske, M.-S. Hacid, and C. Godard, Eds. Springer-Verlag, 2007, vol. 4832, LNCS, pp. 118-129.
18. F. V. Jensen, Bayesian Networks and Decision Graphs. New York: Springer-Verlag, 2001.
19. V. Hlupic and S. Robinson, BBusiness process modeling and analysis using discrete-event simulation,[ in Proc. 30th Winter Simul. Conf., Washington, DC, Dec. 13-16, 1998, pp. 1363-1370.
20. M. zur Muehlen and M. Rosemann, BIntegrating risks in business process models,[ in Proc. 16th ACIS, Sydney, Australia, Nov. 30-Dec. 2, 2005.
21. A.-W. Scheer, ARISVBusiness Process Modeling, 3rd ed. New York: Springer-Verlag, 2000.
22. D. Neiger, L. Churilov, M. zur Muehlen, and M. Rosemann, BIntegrating risks in business process models with value focused process engineering,[ in Proc. ECIS, Goteborg, Sweden, Jun. 12-14, 2006.
23. S. Tjoa, S. Jakoubi, and G. Quirchmayr, BROPE: A methodology for enabling the risk-aware modelling and simulation of business processes,[ in Proc. 15th ECIS, St. Gallen, Switzerland, Jun. 7-9, 2007, pp. 1596-1607.
24. S. Tjoa, S. Jakoubi, and G. Quirchmayr, BEnhancing business impact analysis and risk assessment applying a risk-aware process modeling and simulation methodology,[ in Proc. 3rd Int. Conf. ARES, Okinawa, Japan, Mar. 25-28, 2008, pp. 48-55.
25. S. Tjoa, S. Jakoubi, G. Goluch, and G. Quirchmayr, BExtension of a methodology for risk-aware business process modeling and simulation enabling process-oriented incident handling support,[ in Proc. 22nd Int. Conf. AINA, Barcelona, Spain, Mar. 4-7, 2008, pp. 179-186.
26. F. Cheng, D. Gamarnik, N. Jengte, W. Min, and B. Ramachandran, BModeling operational risk in business processes,[ J. Oper. Risk, vol. 2, no. 2, pp. 73-98, 2007.
27. M. Bhuiyan, M. M. Zahidul Islam, G. Koliadis, A. Krishna, and A. Ghose, BManaging business process risk using rich organizational models,[ in Proc. 31st Annu. Int. COMPSAC, Beijing, China, Jul. 23-27, 2007, pp. 509-520.
28. IDEF Method Report, Integration Definition for Functional Modeling,[ Federal Information Processing Standard Publication 183, 1993
29. J. H. Lambert, R. K. Jennings, and N. N. Joshi, BIntegration of risk identification with business process models,[ Syst. Eng., vol. 9, no. 3, pp. 187-198, Oct. 2006.
30. L. Deleris and E. Cope, BSources of variability in IBM's system x supply chain,[ IBM, Yorktown Heights, NY, Res. Rep. RC24176, 2007.
31. H. Kumamoto and E. J. Henley, Probabilistic Risk Assessment and Management for Engineers and Scientists, 2nd ed. Piscataway, NJ: IEEE Press, 1996.
32. S. Bagchi, X. Bai, and J. Kalagnanam, BData quality management using business process modeling,[ in Proc. IEEE Int. Conf. SCC, Chicago, IL, Sep. 18-22, 2006, pp. 398-405.
33. X. Bai, R. Padman, and R. Krishnan, On Risk Management in Business Process Design. Pittsburgh, PA: Heinz School, Carnegie Mellon Univ., Aug. 2006, Working Paper 2006-2010
34. J. Recker, M. Rosemann, M. Indulska, and P. Green, BBusiness process modeling: A comparative analysis,[ J. Assoc. Inf. Syst., vol. 10, no. 5, pp. 333-363, 2009.
35. Algorithmics, Inc. (2007, Jan.). Algo FIRST database. [Online]. Available: http://www.algorithmics.com/EN/services/ 23-prodserv.cfm
36. M. Weske, Business Process Management. New York: Springer-Verlag, 2007.
37. W. van der Aalst and K. van Hee, Workflow Management: Models, Methods, and Systems. Cambridge, MA: MIT Press, 2004.
38. P. Loucopoulos and E. Kavakli, BEnterprise modelling and the teleological approach to requirements engineering,[ Int. J. Intell. Cooperative Inf. Syst., vol. 4, no. 1, pp. 45-79, Mar. 1995.
39. B. K. Ray, L. Deleris, and E. Cope, BRisk-extended business process modeling for enterprise risk analysis and management,[ in Working Paper, IBM Research, 2009.
40. A. R. Hevner, T. M. Salvatore, J. Park, and S. Ram, BDesign science in information systems research,[ MIS Quart., vol. 28, no. 1, pp. 75-105, Mar. 2004.
41. W. Bandara, G. G. Gable, and M. Rosemann, BFactors and measures of business process modeling: Model building through a multiple case study,[ Eur. J. Inf. Syst., vol. 14, no. 4, pp. 347-360, Dec. 2005.
42. H. Chen and D. D. Yao, Fundamentals of Queuing Networks. New York: Springer-Verlag, 2001.