A conceptual model for enterprise risk management. Issue 5 (13th August 2019)

• Record Type: Journal Article
• Authors: Almeida, Rafael; Teixeira, José Miguel; Mira da Silva, Miguel; Faroleiro, Paulo
• Is Part Of: Journal of enterprise information management. Volume 32:Issue 5(2019)
• Page Start: 843
• Page End: 868
• Publication Date: 2019-08-13
• Subjects: Risk management -- Conceptual modelling -- Enterprise architecture -- Archimate -- ISO 31000; Management information systems -- Periodicals; Business logistics -- Periodicals; Business -- Data processing -- Periodicals; Management -- Data processing -- Periodicals; 658.05
• DOI: 10.1108/JEIM-05-2018-0097
• Languages: English
• ISSNs: 1741-0398

Abstract

Abstract : Purpose: The purpose of this paper is to ease the ISO 31000 standard understanding and provide mechanisms that allow organizations to adopt and adapt this standard to their reality. Design/methodology/approach: The research methodology adopted in this research was the design science research methodology. Findings: Key finding is that enterprise architecture (EA) models and EA tools can help reduce the complexity of the ISO 31000 standard and improve the communication between stakeholders. Practical implications: The research proposal serves the purpose of supporting the evidence collection for an enterprise risk management (ERM) initiative in an as-was, as-is, or to-be perspective. Originality/value: Traditional ERM efforts operate on silos, limiting the sharing of risk information and the achievement of an organization-wide view of risks. EA can provide a common way to model complex business systems, from the strategic level to implementation details. This paper proposes the use of an EA model and an EA tool (Atlas) to represent ISO 31000, allowing a better understanding on the value of assets that can be affected from the manifestation of some risks over time.