Citation
Che Pa, Noraini and Anthony Jnr, Bokolo and Jusoh, Yusmadi Yah and Nor, Rozi Nor Haizan and Mohd Aris, Teh Noranis
(2017)
A risk mitigation decision framework for an information technology organizations.
Journal of Theoretical and Applied Information Technology, 95 (10).
2102 - 2113.
ISSN 1992-8645; ESSN: 1817-3195
Abstract
Information technology (IT) organizations are faced with various risks such as strategic, operational and technical risks. These risks should be identified, measured and mitigated. Risk mitigation gives an opportunity to IT practitioners and management to compute risks and develop suitable strategies to treat the risk.Risk mitigation in organizations provides a disciplinary environment for decision making to measure and treat potential risk continuously. Existing model and frameworks provides inadequate support to practitioners in making risk decision pertaining risk mitigation. This is due to the fact that existing models or frameworks lacks the capabilities to support practitioners. In order to address this challenge, this research identifies the processes and components of risk mitigation in organization’s and proposes a framework of risk decision for mitigating both technical and operational risk using software agents and knowledge mapping as techniques. Qualitative research was adopted using interview to collect data. A pilot study was carried out to validate the instrument. The case study was later carried out to verify the risk mitigation process and components. Lastly the framework was evaluated using iterative triangulation.
Download File
Preview |
|
Text (Abstract)
A risk mitigation decision framework for an information technology organizations.pdf
Download (99kB)
| Preview
|
|
Additional Metadata
Actions (login required)
|
View Item |