Dear all,
I'm working on the research report to find risk management for Information System.I'm organizing my paper to proof the risk that is affecting the Information System,I'm needing a good template for my hierarchy of information on this research paper? I please to hear any information and most importantly welcoming anybody on board to work together to work for this research report.
Thank you
Dear Colleague,
it is not clear what do you mean under the term 'Information System':
- the information system itself, meaning the architecture, construct, structure of information which can be labelled as the oucome of the 'information infrastructure'
- the outcome of the information system infastructure which can be labelled as the 'orgware'
- or the information technology system (software and hardware)
All the three above have broad scale of risk issues which are only partly overlapping. I would suggest to define more precisely your question.
Information systems implementations fail all the time. Here is one report and one paper that discusses the above mentioned:
1) http://www.intosaiitaudit.org/intoit_articles/26_p12top17.pdf, and
2) https://sites.hks.harvard.edu/m-rcbg/ethiopia/Publications/Top%2010%20Reasons%20Why%20Systems%20Projects%20Fail.pdf.
You can start the premise by analyzing the factors that affect implementation failure. The risks associated with IS are tremendous (looking them from many dimensions - hardware, software, people, management, technical, develpmental, etc etc). There is so much literature that you will eventually drown if you start with a generic question as you have put in your question. I would suggest you to narrow it down to what is it that you want to do in your report. You want to proof the risk! How do you plan to do that? If you want a theoretical study that there is risk associated with IS than there are many studies, You will eventually see a pattern after going through the literature.
Hope this helps, ask if you have anything specific in mind.
Dear Bleartz Abazi ,
Thnak you for your help see my skeletal as per stated.
Here's a bit more grist for your mill.
http://jmsdrgn.squarespace.com/storage/Cyber%20Security%20for%20Squarespace.pdf
Jim
Basically, the concept of risk management is identical across fields. Thus, you must have "a clear context" of risk management that you are intended to research in.
The following website may offers some insight on the topics of ERM and IS.
https://erm.ncsu.edu/library/categories/category/erm-and-information-technology-risk
Hafiz
I suppose the ISO 31000 Risk management should be a good reference.
Dear Isaac Kants...
I just went through the areas that you have indicated in the file
Research Gate_16102017.docx as areas that you want to consider under risk management. As I understand you mean information system as hardware and software in information systems/IT applications. In IT governance risk management consider as one of the key areas one should consider when implementing/managing information systems. Probably you will be able to find a good template from IT governance frameworks such as COBIT (ISACA), ITIL for your study .. we are conducting a few research in similar directions and let us know if need any assistance/collaborations...
Thank you Mr Nalaka Lankasena for your offer.I will Inform you when I need Assistance
Regards
Issac
Check the following reference Please.. it might's assist you in your question …
https://www.bis.org/publ/ecsc07f.pdf
- Badges
- Science topic
- Similar topics
- Methodology
- Research Methodology
- Research Papers