Deriving resource requirements applying risk-aware business process modeling and simulation

16th European Conference on Information Systems, ECIS 2008

Volumn , Issue , 2008, Pages

  Jakoubi, Stefan ^a   Goluch, Gernot ^a   Tjoa, Simon ^a   Quirchmayr, Gerald ^b  

^a Secure Business Austria   (Austria)

^b UNIVERSITY OF VIENNA   (Austria)

Author keywords

Business process management; Capacity planning; Risk aware business process modeling and simulation

Indexed keywords

BUSINESS CONTINUITY MANAGEMENT; BUSINESS PROCESS; BUSINESS PROCESS MANAGEMENT; BUSINESS PROCESS MODELING; CAPACITY PLANNING; CONTINUOUS OPERATION; ECONOMIC REQUIREMENTS; INFORMATION BASIS; PROCESS MODELING AND SIMULATIONS; RESOURCE REQUIREMENTS; SIMULATION CAPABILITY;

ENTERPRISE RESOURCE MANAGEMENT; INDUSTRIAL ENGINEERING; INDUSTRY; INFORMATION SYSTEMS; RISK MANAGEMENT; ROPE; SYSTEMS ENGINEERING;

COMPUTER SIMULATION;

EID: 84870639484     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (25)

1. Alberts, C. J. and Dorofee, A. J. (2001) OCTAVE Method Implementation Guideline Version 2.0.
2. BOC (2008) Business Process Management Systems (BPMS) Paradigm, http://www.boc-eu.com/jumpto.jsp?goto=BPMS&lg=en, Accessed March 2008.
3. British Standards Institution (BSI) (2006) BS 25999 - Business Continuity Management.
4. Business Continuity Institute (BCI) (2008) Good Practice Guidelines 2008.
5. Distaster Recovery Institute / Disaster Recovery Journal (DRI/DRJ) (2007) Generally Accepted Business Continuity Practises.
6. European Network and Information Security Agency (ENISA) (2008) Business and IT Continuity: Overview and Implementation Principles.
7. German Federal Office for Information Security (BSI) (2004) IT-Grundschutz Manual (english version).
8. German Federal Office for Information Security (BSI) (2007) BSI Standards 100-x (english version).
9. Goluch, G., Ekelhart, A., Fenz, S., Jakoubi, S., Tjoa, S. and Mück, T. (2008) Integration of an Ontological Information Security Concept in Risk Aware Business Process Management, HICSS 2008 IEEE, January.
10. Hao, M. C., Keim, D. A., Dayal, U. and Schneidewind, J. (2006) Business Process Impact Visualization and Anomaly Detection, Information Visualization, Volume 5, Issue 1.
11. International Standards Organization (ISO) (2007) ISO/PAS 22399 - Societal security - Guideline for incident preparedness and operational continuity management.
12. Jakoubi, S., Tjoa, S. and Quirchmayr, G. (2007) ROPE: A Methodology for Enabling the Risk-Aware Modelling and Simulation of Business Processes, ECIS 2007.
13. Karagiannis, D., Junginger, S. and Strobl, R. (1996) Business Process Modelling, (Eds, Scholz, R., Bernd, Stickel and Eberhard) Springer, Berlin, pp. 81-106.
14. National Fire Protection Association (NFPA) (2007) NFPA 1600:2007 - Standard on Disaster/Emergency Management and Business Continuity Programs.
15. Neiger, D., Churilov, L., zur Muehlen, M. and Rosemann, M. (2006) Integrating Risks in Business Process Models with Value Focused Process Engineering, ECIS 2006.
16. National Institute of Standards and Technology (NIST) (2002a) NIST SP800-30: Risk Management Guide for Information Technology Systems.
17. National Institute of Standards and Technology (NIST) (2002b) NIST SP800-34: Contingency Planning Guide for Information Technology Systems.
18. National Institute of Standards and Technology (NIST) (2004) NIST SP800-61: Computer Security Incident Handling Guide.
19. National Institute of Standards and Technology (NIST) (2005) NIST SP800-83: A Guide to Malware Incident Prevention and Handling.
20. Röhrig, S. (2003) Using Process Models to Analyse IT Security Requirements, University of Zurich.
21. Scheer, A. W., Keller, G. and Nüttgens, M. (1992) Semantische Prozeßmodellierung auf der Grundlage Ereignisgesteuerter Prozeßketten (EPK), Veröffentlichungen des Instituts für Wirtschaftsinformatik, Heft 89, Saarbrücken.
22. Tjoa, S., Jakoubi, S., Goluch, G. and Quirchmayr, G. (2008a) Extension of a Methodology for Risk-Aware Business Process Modeling and Simulation Enabling Process-Oriented Incident Handling Support, Advanced Information Networking and Applications (AINA).
23. Tjoa, S., Jakoubi, S. and Quirchmayr, G. (2008b) Enhancing Business Impact Analysis and Risk Assessment applying a Risk-Aware Business Process Modeling and Simulation Methodology, International Conference on Availability, Reliability and Security (ARES).
24. Van der Aalst, W. M. P. and de Medeiros, A. K. A. (2005) Process Mining and Security: Detecting Anomalous Process Executions and Checking Process Conformance, International Workshop on Security Issues with Petri Nets and Other Computational Models (WISP).
25. Zur Muehlen, M. and Rosemann, M. (2005) Integrating Risks in Business Process Models, Australiasian Conference on Information Systems (ACIS) 2005, Sydney, Australia.