A Maturity Model for Assessing IS Risk Management Activity Considering the Dependencies Between Its Elements

Abstract

The information systems (IS) are a key asset for organizations. Therefore, managing IS risks becomes more and more important especially within a world in perpetual change. Since IS risk management creates added-value, it must follow a process of continuous improvement orchestrated by a maturity model that figures out available pathways for a better improvement. The studied literature shows the lack of an IS risk management maturity model that considers all IS components and specificities of risk management activity. The present article shows first this lack in the section related to the comparative analysis of the existing models. Then, it proposes a maturity model to address this issue. The proposed model aims to assess the information system risk management activity while considering the dependencies between its elements.

An Algorithm To Determine The Maturity Improvement Plan For Information System Risk Management. Application On A Case Study

“…Algorithm 1 provides a full description of the "Path Prerequisites" algorithm. (Elmaallam et al, 2019) aims to evaluate Information System (IS) risk management. An IS is defined as a special case of work system (Alter and Sherer, 2004).…”

“…Section three introduces the "Path Prerequisites" algorithm. Section four illustrates the "demonstration and evaluation" phases which are an application of the "Path Prerequisites" algorithm to the model "ISR3M" (Elmaallam et al, 2019), a maturity model for assessing the information system risk management. Section five concludes.…”