On risk management with information flows in business processes

Information Systems Research

Volumn 24, Issue 3, 2013, Pages 731-749

  Bai, Xue ^a   Krishnan, Ramayya ^b   Padman, Rema ^b   Wang, Harry Jiannan ^c  

^a UNIVERSITY OF CONNECTICUT   (United States)

^b CARNEGIE MELLON UNIVERSITY   (United States)

^c UNIVERSITY OF DELAWARE   (United States)

Author keywords

Business process management; Conditional value at risk; Control; Expected loss; Information flow

Indexed keywords

ADMINISTRATIVE DATA PROCESSING; ARTIFICIAL INTELLIGENCE; CONTROL; DECISION SUPPORT SYSTEMS; ENTERPRISE RESOURCE MANAGEMENT; ERRORS; PROCESS DESIGN; RISK ASSESSMENT; RISK MANAGEMENT; VALUE ENGINEERING;

BUSINESS DECISION SUPPORTS; BUSINESS PROCESS DESIGN; BUSINESS PROCESS MANAGEMENT; CONDITIONAL VALUE-AT-RISK; ECONOMIC CONSEQUENCES; EXPECTED LOSS; INFORMATION FLOWS; ORDER FULFILLMENT PROCESS;

PROCESS CONTROL;

EID: 84885157372     PISSN: 10477047     EISSN: 15265536     Source Type: Journal    
DOI: 10.1287/isre.1120.0450     Document Type: Article

References (59)

1. Acerbi C (2002) Spectral measures of risk: A coherent representation of subjective risk aversion. J. Banking Finance 26(7):1505-1518.
2. Bacani C (2011) Olympus scandal: Bye, old guard, hello 0 0 0 old guard? CFO Innovation Asia (October 31).
3. Basu A, Blanning RW (2000) A formal approach to workflow analysis. Inform. Systems Res. 11(1):7-36.
4. Basu A, Kumar A (2002) Research commentary: Workflow management issues in e-business. Inform. Systems Res. 13(1):1-14.
5. Berger J (1980) Statistical Decision Theory: Foundations, Concepts, and Methods (Springer-Verlag, New York).
6. Cobb CW, Douglas PH (1928) A theory of production. Amer. Econom. Rev. 18(1):139-165.
7. Conforti R, Fortino G, La Rosa M, Ter Hofstede AHM (2011) History-aware, real-time risk detection in business processes. On the Move to Meaningful Internet Systems, Lecture Notes in Computer Science, Vol. 7044 (Springer-Verlag, Berlin), 100-118.
8. Corbett RB (2004) A view of the future of risk management. Risk Management 6(3):51-56.
9. De Lusignan S (2009) Improving data quality and clinical records: Lessons from the UK National Programme about structure, process and utility. Luzar-Stiler V, Jarec I, Bekic Z, eds. Proc. 31st Internat. Conf. Inform. Tech. Interfaces (University of Zagreb, Univesity Computing Centre-SRCE, Zagreb, Croatia), 13-14.
10. Duffie D, Pan J (1997) An overview of value at risk. J. Derivatives 4(3):7-49.
11. Duffie D, Singleton KJ (2003) Credit Risk: Pricing, Measurement, and Management (Princeton University Press, Princeton, NJ).
12. English L (2009) Information quality tipping point: Plain English about information quality. Proc. ITI 2009 31st Int. Conf. Inform. Technology Interfaces, June 22-25, 2009, Cavtat, Croatia, 13-14.
13. Enterprise Risk Management Committee (2003) Overview of enterprise risk management. Casualty Actuarial Society, http:// www.casact.org/area/erm/overview.pdf.
14. Forster M, Bailey C, Brinkhof MWG, Graber C, Boulle A, Spohr M, Balestre E, May M, Keiser O, Jahn A (2008) Electronic medical record systems, data quality and loss to follow-up: Survey of antiretroviral therapy programmes in resource-limited settings. Bull. World Health Organ. 86(12):939-947.
15. Hammer M, Champy JA (1993) Reengineering the Corporation: A Manifesto for Business Revolution (HarperCollins, New York).
16. Hee KMv, Reijers HA (2000) Using formal analysis techniques in business process redesign. Business Process Management, Lecture Notes in Computer Science, Vol. 1806 (Springer-Verlag, Berlin), 142-160.
17. ISACA (2007) Control Objectives for Information and Related Technology (COBIT). ISACA & IT Governance Institute, Rolling Mendows, IL.
18. J. P. Morgan & Company (1996) RiskMetrics-Technical Document, 4th ed. (Morgan Guaranty Trust Company, New York).
19. Kiepuszewski B, Ter Hofstede AHM, Bussler C (2000) On structured workflow modelling. Wangler B, Bergman L, eds. Proc. 12th Int. Conf. Adv. Inform. Systems Engrg., Stockholm, Sweden, 431-445.
20. Kohn LT, Corrigan JM, Donaldson MS (2000) To err is human: Building a safer health system. A report of the Committee on Quality of Health Care in America. Committee on Quality of Health Care in America, Institute of Medicine, http://books .nap.edu/openbook.php?record_id=9728.
21. Krishnan R, Peters J, Padman R, Kaplan D (2005) On data reliability assessment in accounting information systems. Inform. Systems Res. 16(3):307-326.
22. Laue R, Mendling J (2010) Structuredness and its significance for correctness of process models. Inform. Systems E-Bus. Management 8(3):287-307.
23. Lea RB, Adams SJ, Boykin RF (1992) Modeling of the audit risk assessment process at the assertion level within an account balance. Auditing: J. Practice Theory 11(Supplement):152-179.
24. Liu D, Wang J, Chan S, Sun J, Zhang L (2002) Modeling workflow processes with colored Petri nets. Comput. Indust. 49(3):267-281.
25. Liu R, Kumar A (2005) An analysis and taxonomy of unstructured workflows. Proc. 3rd Internat. Conf. Bus. Process Management, Nancy, France, 268-284.
26. Liu R, Kumar A, Van der Aalst W (2007) A formal modeling approach for supply chain event management. Decision Support Systems 43(3):761-778.
27. Marinos G (2004) Data quality: A risk-based approach. Inform. Management (August 1), http://www.information -management.com/issues/20040801/1007208-1.html?zkPrintable= 1&nopagination=1.
28. Mausser H, Rosen D (1999) Beyond VaR: Triangular risk decomposition. Algo Res. Quart. 2(1):31-43.
29. Mendling J, Lassen K, Zdun U (2008) On the transformation of control flow between block-oriented and graph-oriented process modelling languages. Internat. J. Bus. Process Integration and Management 3(2):96-108.
30. Murphy M (2011) UBS trader Adoboli held over US$2 bn loss. Financial Times (September 15).
31. Olson JE (2003) Data Quality: The Accuracy Dimension (Morgan Kaufmann, Burlington, MA).
32. Object Management Group (2011a) UML Specification, http://www .omg.org/spec/UML/2.4.l/.
33. Object Management Group (2011b) Business Process Model and Notation Specification, http://www.omg.org/spec/BPMN/ 2.0/.
34. Pasley K (2002) Protecting financial information: Sarbanes-Oxley. SOA Compliance Whitepaper, http://www.compliancehome .com/whitepapers/SOX/abstract10846.html.
35. Pflug GCh (2000) Some remarks on the value-at-risk and the conditional value-at-risk. Uryasev S, ed. Probabilistic Constrained Optimization: Methodology and Applications (Kluwer Academic Publishers, Dordrecht, The Netherlands).
36. Reijers H, Jansen-Vullers M, zur Muehlen M, Appl W (2007) Workflow management systems C swarm intelligence D dynamic task assignment for emergency management applications. Alonso G, Dadam P, Rosemann M, eds. Proc. 5th Internat. Conf. Bus. Process Management (Springer-Verlag, Berlin, Heidelberg).
37. Richter A (2007) The high cost of clean data. http://www.cfo.com/ article.cfm/9705501/c_2984274/?f=archives.
38. Rockafellar RT, Uryasev S (2000) Optimization of conditional valueat- risk. J. Risk 2(3):21-42.
39. Rockafellar RT, Uryasev S, Zabarankin M (2006a) Generalized deviations in risk analysis. Finance and Stochastics 10(1):51-74.
40. Rockafellar RT, Uryasev S, Zabarankin M (2006b) Optimality conditions in portfolio analysis with general deviation measures. Math. Programming 108(2):515-540.
41. Russell N, Ter Hofstede AHM, Van der Aalst W, Mulyar N (2006) Workflow control-flow patterns: A revised view. BPM Center Report BPM-06-22, BPMcenter.org, 06-22.
42. Russell N, Ter Hofstede AHM, Edmond D, Van der Aalst WMP (2004) Workflow data patterns. QUT Technical report, FITTR- 2004-01, Queensland University of Technology, Brisbane, Australia.
43. Russell N, Van der Aalst WMP, Ter Hofstede AHM, Edmond D (2005) Workflow resource patterns: Identification, representation and tool support. Pastor O, Falcão e Cunha J, eds. Proc. 17th Internat. Conf. Adv. Inform. Systems Engrg., Porto, Portugal.
44. Sadiq W, Orlowska ME (2000) Analyzing process models using graph reduction techniques. Info. Systems 25(2):117-134.
45. Scheer A-W (2000) ARIS-Business Process Modeling (Springer, Berlin, Heidelberg).
46. Stein HD, Nadkarni P, Erdos J, Miller PL (2000) Exploring the degree of concordance of coded and textual data in answering clinical queries from a clinical data repository. J. Amer. Medical Informatics Assoc. 7(1):42-54.
47. Strong DM, Lee YW, Wang RY (1997) 10 Potholes in the road to information quality. IEEE Comput. 30(8):38-46.
48. Sun SX, Zhao JL, Nunamaker JF, Sheng ORL (2006) Formulating the data flow perspective for business process management. Inform. Systems Res. 17(4):374-391.
49. Van der Aalst WMP (1998) The application of Petri nets to workflow management. J. Circuits, Systems Comput. 8(1):21-66.
50. Van der Aalst WMP (2000) Workflow verification: Finding controlflow errors using Petri-net-based techniques. Business Process Management: Models, Techniques, and Empirical Studies, Lecture Notes in Computer Science, Vol. 1806 (Springer-Verlag, Berlin), 161-183.
51. Van der Aalst WMP, Ter Hofstede AHM (2005) A YAWL: Yet another workflow language. Inform. Systems 30(4):245-275.
52. Van der Aalst WMP, Ter Hofstede AHM, Kiepuszewski B, Barros AP (2003) Workflow patterns. Distributed and Parallel Databases 14(3):5-51.
53. Van Dongen B, Jansen-Vullers M, Verbeek H, Van der Aalst WMP (2007) Verification of the SAP reference models using EPC reduction, state-space analysis, and invariants. Comput. Indust. 58(6):578-601.
54. Varian HR (1992) Microeconomic Analysis (W. W. Norton & Company, New York).
55. Wand Y, Weber R (1989) A model of control and audit procedure change in evolving data processing systems. The Accounting Rev. 64(1):87-107.
56. Wang J, Chaudhury A, Rao HR (2008) A value-at-risk approach to information security investment. Inform. Systems Res. 19(1):106-120.
57. Zhao JL, Brown GW, Carey MJ, Kumar A, Spohrer JC, Tanniru M (2005) Services science: Services innovation research and education. Chang CK, Zhang LJ, eds. Proc. 2005 IEEE Internat. Conf. Services Comput. (IEEE Computer Society, Los Alamitos, CA).
58. zur Muehlen M, Ho D (2005) Risk management in the BPM lifecycle. Bussler CJ, Haller A, eds. Proc. Workshop Bus. Process Design (Springer-Verlag, Berlin, Heidelberg), 454-466.
59. zur Muehlen M, Rosemann M (2005) Integrating risks in business process models. Campbell B, Underwood J, Bunker D, eds. Proc. Australasian Conf. Inform. Systems (Assoc. Inform. Systems, Atlanta), 1-10.