A framework for risk assessment based on analysis of historical information of workflow execution in IT systems

Computer Networks

Volumn 55, Issue 13, 2011, Pages 2954-2975

  Wickboldt, Juliano Araujo ^a   Bianchin, Luís Armando ^a   Lunardi, Roben Castagna ^a   Granville, Lisandro Zambenedetti ^a   Gaspary, Luciano Paschoal ^a   Bartolini, Claudio ^b  

^a FEDERAL UNIVERSITY OF RIO GRANDE DO SUL   (Brazil)

^b HEWLETT PACKARD LABORATORIES   (United States)

Author keywords

Change management; Infrastructures and services management; Networks operations and management; Project management; Risk management

Indexed keywords

ASSESSMENT PROCESS; CHANGE MANAGEMENT; COST OVERRUNS; HISTORICAL INFORMATION; INFRASTRUCTURES AND SERVICES MANAGEMENT; IT CHANGE MANAGEMENT; IT INFRASTRUCTURES; IT MANAGEMENT; IT SYSTEM; PROJECT MANAGERS; RISK INFORMATION; RISK RESPONSE PLANNING; SPEED-UPS; WORK-FLOWS; WORKFLOW EXECUTION;

NETWORK MANAGEMENT; PROJECT MANAGEMENT; RATING; RISK ASSESSMENT; RISK MANAGEMENT; RISK PERCEPTION;

INFORMATION TECHNOLOGY;

EID: 79961021816     PISSN: 13891286     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comnet.2011.05.025     Document Type: Article

References (42)

1. OGC, Information Technology Infrastructure Library (ITIL), 2010. Available at:
2. ISACA, Control Objectives for Information and related Technologies (COBIT), 2010. Available at: (accessed January 2010).
3. OGC, Management of Risk: Guidance for Practitioners, Office of Government Commerce, London, UK, 2007.
4. ISACA, The Risk IT Practitioner Guide, Information Systems Audit and Control Association, Illinois, USA, 2009.
5. R. van Wyk, P. Bowen, and A. Akintoye Project risk management practice: the case of a South African utility company International Journal of Project Management 26 2 2008 149 163 10.1016/j.ijproman.2007.03.011 (Pubitemid 351200306)
6. K. Bakker, A. Boonstra, and H. Wortmann Does risk management contribute to it project success? a meta-analysis of empirical evidence International Journal of Project Management 28 5 2010 493 503 10.1016/j.ijproman.2009.07.002
7. E. Kutsch, and M. Hall Deliberate ignorance in project risk management International Journal of Project Management 28 3 2010 245 255 10.1016/j.ijproman.2009.05.003
8. T. Setzer, K. Bhattacharya, H. Ludwig, Decision support for service transition management: enforce change scheduling by performing change risk and business impact analysis, in: 11th IEEE/IFIP Network Operations and Management Symposium (NOMS), Salvador, Brazil, 2008, pp. 200-207. doi:10.1109/NOMS.2008. 4575135.
9. J. Sauvé, R.A. Santos, R.R. Almeida, J.A.B. Moura, On the risk exposure and priority determination of changes in IT service management, in: 18th IFIP/IEEE International Workshop on Distributed Systems: Operations and Management (DSOM), San Jose, USA, 2007, pp. 147-158.
10. M. Marques, R. Neves-Silva, Risk assessment to support decision on complex manufacturing and assembly lines, in: 5th IEEE International Conference on Industrial Informatics (INDIN), Vienna, Austria, 2007, pp. 1209-1214. doi:10.1109/INDIN.2007.4384903. (Pubitemid 351306934)
11. R. Fewster, E. Mendes, Measurement, prediction and risk analysis for web applications, in: 7th IEEE International Software Metrics Symposium (METRICS), London, UK, 2001, pp. 338-348. doi:10.1109/METRIC.2001.915541. (Pubitemid 32471022)
12. N. Fenton, and N. Ohlsson Quantitative analysis of faults and failures in a complex software system IEEE Transactions on Software Engineering 26 8 2000 797 814 10.1109/32.879815
13. V. Luu, S. Kim, N. Tuan, and S. Ogunlana Quantifying schedule risk in construction projects using Bayesian belief networks International Journal of Project Management 27 1 2009 39 50 10.1016/j.ijproman.2008.03.003
14. J.A. Wickboldt, G.S. Machado, W.L.C. Cordeiro, R.C. Lunardi, A.D. dos Santos, F.G. Andreis, C.B. Both, L.Z. Granville, L.P. Gaspary, C. Bartolini, D. Trastour, A solution to support risk analysis on IT change management, in: Mini-conference of 11th IFIP/IEEE International Symposium on Integrated Network Management (IM), New York, USA, 2009, pp. 445-452. doi:10.1109/INM.2009.5188847.
15. J.A. Wickboldt, L.A. Bianchin, R.C. Lunardi, F.G. Andreis, W.L.C. Cordeiro, C.B. Both, L.Z. Granville, L.P. Gaspary, D. Trastour, C. Bartolini, Improving IT change management processes with automated risk assessment, in: 20th IFIP/IEEE International Workshop on Distributed Systems: Operations and Management (DSOM), LNCS, vol. 5841, Venice, Italy, 2009, pp. 71-84. doi:10.1007/978-3-642-04989-7-6.
16. J.A. Wickboldt, L.A. Bianchin, R.C. Lunardi, F.G. Andreis, R.L. dos Santos, B.L. Dalmazo, W.L.C. Cordeiro, A.L.R. Sousa, L.Z. Granville, L.P. Gaspary, C. Bartolini, Computer-generated comprehensive risk assessment for IT project management, in: 12th IEEE/IFIP Network Operations and Management Symposium (NOMS), Osaka, Japan, 2010, pp. 400-407. doi:10.1109/NOMS.2010. 5488498.
17. OGC, Information Technology Infrastructure Library: Service Transition Version 3.0, Office of Government Commerce, London, UK, 2007.
18. OGC, Information Technology Infrastructure Library: Service Design Version 3.0, Office of Government Commerce, London, UK, 2007.
19. PMI, A Guide to the Project Management Body of Knowledge: PMBOK Guide, third ed., PMI - Project Management Institute, Pennsylvania, USA, 2004.
20. K. Froot, D. Scharfstein, and J. Stein Risk management: coordinating corporate investment and financing policies Journal of Finance 48 5 1993 1629 1658
21. G. Danaei, S.V. Hoorn, A.D. Lopez, C.J.L. Murray, and M. Ezzati Causes of cancer in the world: comparative risk assessment of nine behavioural and environmental risk factors The Lancet 366 9499 2005 1784 1793 10.1016/S0140-6736(05)67725-2 (Pubitemid 41642642)
22. C. Klnppelberg, and R. Kostadinova Integrated insurance risk models with exponential Lévy investment Insurance: Mathematics and Economics 42 2 2008 560 577 10.1016/j.insmatheco.2007.06.002
23. G. Holton Value-at-risk: Theory and Practice 2003 Academic Press - Elsevier
24. J. Chicken, and T. Posner The Philosophy of Risk 1998 Thomas Telford
25. IRM, A Risk Management Standard, The Institute of Risk Management, United Kingdom, 2002.
26. ISO, ISO 31000:2009 Risk management - Principles and Guidelines, International Organization for Standardization, Geneva, Switzerland, 2009.
27. L. Wang, A. Sahai, J. Pruyne, A model-based simulation approach to error analysis of it services, in: 10th IFIP/IEEE International Symposium on Integrated Network Management (IM), Munich, Germany, 2007, pp. 805-808. doi:10.1109/INM.2007.374718. (Pubitemid 47485246)
28. N. Russell, W. van der Aalst, A. ter Hofstede, Exception Handling Patterns in Process-aware Information Systems, Tech. Rep., Eindhoven University of Technology and Queensland University of Technology, Eindhoven, The Netherlands, BPM Center Report BPM-06-04, BPMcenter.org, 2006.
29. A. Keller, J. Hellerstein, J. Wolf, K. Wu, V. Krishnan, The CHAMPS system: change management with planning and scheduling, in: 9th IEEE/IFIP Network Operations and Management Symposium (NOMS), Seoul, Korea, 2004, pp. 395-408. doi:10.1109/NOMS.2004.1317679.
30. G.S. Machado, F.F. Daitx, W.L.C. Cordeiro, C.B. Both, L.P. Gaspary, L.Z. Granville, C. Bartolini, A. Sahai, D. Trastour, K. Saikoski, Enabling rollback support in IT change management systems, in: 11th IEEE/IFIP Network Operations and Management Symposium (NOMS), Salvador, Brazil, 2008, pp. 347-354. doi:10.1109/NOMS.2008.4575154.
31. G.S. Machado, W.L.C. Cordeiro, A.D. Santos, J.A. Wickboldt, F.G.A. Roben Castagna Lunardi, C.B. Both, L.P. Gaspary, L.Z. Granville, D. Trastour, C. Bartolini, Refined failure remediation in it change management systems, in: Mini-conference of 11th IFIP/IEEE International Symposium on Integrated Network Management (IM), New York, USA, 2009, pp. 638-645. doi:10.1109/INM.2009.5188872.
32. R. Reboutas, J. Sauvé, A. Moura, C. Bartolini, D. Trastour, A decision support tool to optimize scheduling of IT changes, in: 10th IFIP/IEEE International Symposium on Integrated Network Management (IM), Munich, Germany, 2007, pp. 343-352. doi:10.1109/INM.2007.374799. (Pubitemid 47485188)
33. P. Hearty, N. Fenton, D. Marquez, and M. Neil Predicting project velocity in XP using a learning dynamic Bayesian network model IEEE Transactions on Software Engineering 35 1 2009 124 137 10.1109/TSE.2008.76
34. W.L.C. Cordeiro, G.S. Machado, F.F. Daitx, C.B. Both, L.P. Gaspary, L.Z. Granville, A. Sahai, C. Bartolini, D. Trastour, K. Saikoski, A template-based solution to support knowledge reuse in IT change design, in: 11th IEEE/IFIP Network Operations and Management Symposium (NOMS), Salvador, Brazil, 2008, pp. 355-362. doi:10.1109/NOMS.2008.4575155.
35. W.L.C. Cordeiro, G.S. Machado, F.G. Andreis, A.D. dos Santos, C.B. Both, L.P. Gaspary, L.Z. Granville, C. Bartolini, and D. Trastour ChangeLedge: change design and planning in networked systems based on reuse of knowledge and automation Computer Networks 53 16 2009 2782 2799 10.1016/j.comnet.2009.07.001
36. IEEE Std 1490-2003, IEEE Guide Adoption of PMI Standard a Guide to the Project Management Body of Knowledge, (Revision of IEEE Std 1490-1998), 2004. doi:10.1109/IEEESTD.2004.94565.
37. M. Dumas, W. Van Der Aalst, and A. Ter Hofstede Process-aware Information Systems 2005 Wiley-Interscience
38. WfMC, Workflow Process Definition Interface - Xml Process Definition Language. (accessed November 2009).
39. DMTF, CIM - Common Information Model, 2009. (accessed November 2009).
40. OASIS, BPEL - Business Process Execution Language - Version 2.0, 2007. (accessed November 2009).
41. L.A. Bianchin, J.A. Wickboldt, L.Z. Granville, L.P. Gaspary, C. Bartolini, M. Rahmouni, Similarity metric for risk assessment in IT change plans, in: 6th International Conference on Network and Service Management (CNSM), Niagara Falls, Canada, 2010, pp. 25-32.
42. Hewlett-Packard Development Company, HP Quality Center. Available at: (accessed November 2009).