Managing risk in process-aware information systems

This research contributes a fully-operational approach for managing business process risk in near real-time. The approach consists of a language for defining risks on top of process models, a technique to detect such risks as they eventuate during the execution of business processes, a recommender system for making risk-informed decisions, and a technique to automatically mitigate the detected risks when they are no longer tolerable. Through the incorporation of risk management elements in all stages of the lifecycle of business processes, this work contributes to the effective integration of the fields of Business Process Management and Risk Management.

Risk management and high reliability : a case study of Australian airport management

This thesis investigated risk management and organisational reliability in airports from the perspective of complex sociotechnical systems (CSSs). Two research studies were undertaken, the first focusing on the processes by which disruptive events occur, are detected and responded to; the second exploring the presence of organisational reliability traits within airports. A key result of the studies was the development of new approach: the Critical Incident Disturbance Process model that detailed a means to understand and analyse how disruptions in complex CSSs might be influenced by vulnerability reduction and enhanced risk management. Further, this thesis identified and defined the concept of 'compartmentalised reliability' in complex sociotechnical systems, extending existing knowledge of high reliability theory.