42 resultados para Information Risk
Resumo:
In recent years the topic of risk management has moved up the agenda of both government and industry, and private sector initiatives to improve risk and internal control systems have been mirrored by similar promptings for change in the public sector. Both regulators and practitioners now view risk management as an integral part of the process of corporate governance, and an aid to the achievement of strategic objectives. The paper uses case study material on the risk management control system at Birmingham City Council to extend existing theory by developing a contingency theory for the public sector. The case demonstrates that whilst the structure of the control system fits a generic model, the operational details indicate that controls are contingent upon three core variables—central government policies, information and communication technology and organisational size. All three contingent variables are suitable for testing the theory across the broader public sector arena.
Resumo:
Biomass is projected to account for approximately half of the new energy production required to achieve the 2020 primary energy target in the UK. Combined heat and power (CHP) bioenergy systems are not only a highly efficient method of energy conversion, at smaller-scales a significant proportion of the heat produced can be effectively utilised for hot water, space heating or industrial heating purposes. However, there are many barriers to project development and this has greatly inhibited deployment in the UK. Project viability is highly subjective to changes in policy, regulation, the finance market and the low cost incumbent; a high carbon centralised energy system. Unidentified or unmitigated barriers occurring during the project lifecycle may not only negatively impact on the project but could ultimately lead to project failure. The research develops a decision support system (DSS) for small-scale (500 kWe to 10 MWe) biomass combustion CHP project development and risk management in the early stages of a potential project’s lifecycle. By supporting developers in the early stages of project development with financial, scheduling and risk management analysis, the research aims to reduce the barriers identified and streamline decision-making. A fuzzy methodology is also applied throughout the developed DSS to support developers in handling the uncertain or approximate information often held at the early stages of the project lifecycle. The DSS is applied to a case study of a recently failed (2011) small-scale biomass CHP project to demonstrate its applicability and benefits. The application highlights that the proposed development within the case study was not viable. Moreover, further analysis of the possible barriers with the DSS confirmed that some possible modifications to be project could have improved this, such as a possible change of feedstock to a waste or residue, addressing the unnecessary land lease cost or by increasing heat utilisation onsite. This analysis is further supported by a practitioner evaluation survey that confirms the research contribution and objectives are achieved.
Resumo:
This article takes the perspective that risk knowledge and the activities related to RM practice can benefit from the implementation of KM processes and systems, to produce a better enterprise wide implementation of risk management. Both in the information systems discipline and elsewhere, there has been a trend towards greater integration and consolidation in the management of organizations. Some examples of this are: Enterprise Resource Planning (Stevens, 2003), Enterprise Architecture (Zachmann, 1996) and Enterprise Content Management (Smith & McKeen, 2003). Similarly, risk management is evolving into Enterprise Risk Management. KM’s importance in breaking down silos within an organization can help it to do so.
Resumo:
Risk and knowledge are two concepts and components of business management which have so far been studied almost independently. This is especially true where risk management is conceived mainly in financial terms, as, for example, in the banking sector. The banking sector has sophisticated methodologies for managing risk, such as mathematical risk modeling. However. the methodologies for analyzing risk do not explicitly include knowledge management for risk knowledge creation and risk knowledge transfer. Banks are affected by internal and external changes with the consequent accommodation to new business models new regulations and the competition of big players around the world. Thus, banks have different levels of risk appetite and policies in risk management. This paper takes into consideration that business models are changing and that management is looking across the organization to identify the influence of strategic planning, information systems theory, risk management and knowledge management. These disciplines can handle the risks affecting banking that arise from different areas, but only if they work together. This creates a need to view them in an integrated way. This article sees enterprise risk management as a specific application of knowledge in order to control deviation from strategic objectives, shareholders' values and stakeholders' relationships. Before and after a modeling process it necessary to find insights into how the application of knowledge management processes can improve the understanding of risk and the implementation of enterprise risk management. The article presents a propose methodology to contribute to providing a guide for developing risk modeling knowledge and a reduction of knowledge silos, in order to improve the quality and quantity of solutions related to risk inquiries across the organization.
Resumo:
This paper starts from the viewpoint that enterprise risk management is a specific application of knowledge in order to control deviations from strategic objectives, shareholders’ values and stakeholders’ relationships. This study is looking for insights into how the application of knowledge management processes can improve the implementation of enterprise risk management. This article presents the preliminary results of a survey on this topic carried out in the financial services sector, extending a previous pilot study that was in retail banking only. Five hypotheses about the relationship of knowledge management variables to the perceived value of ERM implementation were considered. The survey results show that the two people-related variables, perceived quality of communication among groups and perceived quality of knowledge sharing were positively associated with the perceived value of ERM implementation. However, the results did not support a positive association for the three variables more related to technology, namely network capacity for connecting people (which was marginally significant), risk management information system functionality and perceived integration of the information systems. Perceived quality of communication among groups appeared to be clearly the most significant of these five factors in affecting the perceived value of ERM implementation.
Resumo:
Enterprise Resource Planning (ERP) projects are strategic and capital intensive, so failure may be costly and even cause bankruptcy of companies. Previous studies have proposed ways for improving implementation, but they are mostly generic and follow standardized project management practices as specified in various standards (e.g. the “project management body of knowledge” of the Project Management Institute). Because ERP is interdisciplinary (involving change management, project management and information technology management), it warrants a customized approach to managing risks throughout the life cycle of implementation and operation. Through a practical case study, this paper demonstrates a qualitative, user friendly approach to ERP project risk management. Firstly, through a literature review it identifies various risk factors in ERP implementation. Secondly, the risk management practices of a UK-based multinational consulting company in one of its clients are evaluated. The risk factors from the case study organization and literature are then compared and discussed.
Resumo:
DUE TO COPYRIGHT RESTRICTIONS ONLY AVAILABLE FOR CONSULTATION AT ASTON UNIVERSITY LIBRARY AND INFORMATION SERVICES WITH PRIOR ARRANGEMENT
Resumo:
DUE TO COPYRIGHT RESTRICTIONS ONLY AVAILABLE FOR CONSULTATION AT ASTON UNIVERSITY LIBRARY AND INFORMATION SERVICES WITH PRIOR ARRANGEMENT
Resumo:
DUE TO COPYRIGHT RESTRICTIONS ONLY AVAILABLE FOR CONSULTATION AT ASTON UNIVERSITY LIBRARY AND INFORMATION SERVICES WITH PRIOR ARRANGEMENT
Resumo:
DUE TO COPYRIGHT RESTRICTIONS ONLY AVAILABLE FOR CONSULTATION AT ASTON UNIVERSITY LIBRARY AND INFORMATION SERVICES WITH PRIOR ARRANGEMENT
Resumo:
Risk management and knowledge management have so far been studied almost independently. The evolution of risk management to the holistic view of Enterprise Risk Management requires the destruction of barriers between organizational silos and the exchange and application of knowledge from different risk management areas. However, knowledge management has received little or no attention in risk management. This paper examines possible relationships between knowledge management constructs related to knowledge sharing, and two risk management concepts: perceived quality of risk control and perceived value of enterprise risk management. From a literature review, relationships with eight knowledge management variables covering people, process and technology aspects were hypothesised. A survey was administered to risk management employees in financial institutions. The results showed that the perceived quality of risk control is significantly associated with four knowledge management variables: perceived quality of risk knowledge sharing, perceived quality of communication among people, web channel functionality, and risk management information system functionality. However, the relationships of the knowledge management variables to the perceived value of enterprise risk management are not significant. We conclude that better knowledge management is associated with better risk control, but that more effort needs to be made to break down organizational silos in order to support true Enterprise Risk Management.
Resumo:
Risk assessment is crucial for developing risk management plans to prevent or minimize mental health patients' risks that will impede their recovery. Risk assessments and risk management plans should be closely linked. Their content and the extent to which they are linked within one Trust is explored. There is a great deal of variability in the amount and detail of risk information collected by nurses and how this is used to develop risk management plans. Keeping risk assessment information in one place rather than scattered throughout patient records is important for ensuring it can be accessed easily and linked properly to risk management plans. Strengthening the link between risk assessment and management will help ensure interventions and care is tailored to the specific needs of individual patients, thus promoting their safety and well-being. Thorough risk assessment helps in developing risk management plans that minimize risks that can impede mental health patients' recovery. Department of Health policy states that risk assessments and risk management plans should be inextricably linked. This paper examines their content and linkage within one Trust. Four inpatient wards for working age adults (18-65 years) in a large mental health Trust in England were included in the study. Completed risk assessment forms, for all patients in each inpatient ward were examined (n= 43), followed by an examination of notes for the same patients. Semi-structured interviews took place with ward nurses (n= 17). Findings show much variability in the amount and detail of risk information collected by nurses, which may be distributed in several places. Gaps in the risk assessment and risk management process are evident, and a disassociation between risk information and risk management plans is often present. Risk information should have a single location so that it can be easily found and updated. Overall, a more integrated approach to risk assessment and management is required, to help patients receive timely and appropriate interventions that can reduce risks such as suicide or harm to others. © 2011 Blackwell Publishing.
Developing a probabilistic graphical structure from a model of mental-health clinical risk expertise
Resumo:
This paper explores the process of developing a principled approach for translating a model of mental-health risk expertise into a probabilistic graphical structure. The Galatean Risk Screening Tool [1] is a psychological model for mental health risk assessment based on fuzzy sets. This paper details how the knowledge encapsulated in the psychological model was used to develop the structure of the probability graph by exploiting the semantics of the clinical expertise. These semantics are formalised by a detailed specification for an XML structure used to represent the expertise. The component parts were then mapped to equivalent probabilistic graphical structures such as Bayesian Belief Nets and Markov Random Fields to produce a composite chain graph that provides a probabilistic classification of risk expertise to complement the expert clinical judgements. © Springer-Verlag 2010.
Resumo:
Current tools for assessing risks associated with mental-health problems require assessors to make high-level judgements based on clinical experience. This paper describes how new technologies can enhance qualitative research methods to identify lower-level cues underlying these judgements, which can be collected by people without a specialist mental-health background. Content analysis of interviews with 46 multidisciplinary mental-health experts exposed the cues and their interrelationships, which were represented by a mind map using software that stores maps as XML. All 46 mind maps were integrated into a single XML knowledge structure and analysed by a Lisp program to generate quantitative information about the numbers of experts associated with each part of it. The knowledge was refined by the experts, using software developed in Flash to record their collective views within the XML itself. These views specified how the XML should be transformed by XSLT, a technology for rendering XML, which resulted in a validated hierarchical knowledge structure associating patient cues with risks. Changing knowledge elicitation requirements were accommodated by flexible transformations of XML data using XSLT, which also facilitated generation of multiple data-gathering tools suiting different assessment circumstances and levels of mental-health knowledge. © 2007 Informa UK Ltd All rights reserved.
Resumo:
Intranet technologies accessible through a web based platform are used to share and build knowledge bases in many industries. Previous research suggests that intranets are capable of providing a useful means to share, collaborate and transact information within an organization. To compete and survive successfully, business organisations are required to effectively manage various risks affecting their businesses. In the construction industry too this is increasingly becoming an important element in business planning. The ability of businesses, especially of SMEs which represent a significant portion in most economies, to manage various risks is often hindered by fragmented knowledge across a large number of businesses. As a solution, this paper argues that Intranet technologies can be used as an effective means of building and sharing knowledge and building up effective knowledge bases for risk management in SMEs, by specifically considering the risks of extreme weather events. The paper discusses and evaluates relevant literature in this regard and identifies the potential for further research to explore this concept.