Information Risk Management Method in Digitalization Projects of Business Processes

Abstract

Risk management, in particular information risk, has always been the number one task in the development and implementation of any project. Digitalization projects are especially sensitive to information risks, therefore risk management is constantly looking for protection mechanisms. In the article, the authors analyzed some of the risk management methods proposed by other scientists. At the same time, there are still a number of issues in information risk management in the process of business digitalization. Among the methods that allow minimizing the likelihood of risk events occurring is the methodology for applying business process reengineering, which was used in the development of a new anti-risk method. At the same time, it is proposed to investigate the effectiveness of optimization of business processes through functional cost analysis (FCA) and determine its impact on the performance of the project as a whole. For clarity, the developers of the method propose an algorithm for optimizing the business process using a modified FCA, which is an integral part of the information risk management method of the project. The main idea of the method is that on the basis of the developed conceptual model of the project with its planned time and cost, they carry out identification and analysis of possible information risks, additionally plan certain amounts of reserve time and costs in case of a threat of risk events. That is, as a result of such options, business processes are optimized, information risks are analyzed, and the identification of new information risks during monitoring is repeated, the process is repeated until all possible risks are identified and analyzed, while the project does not spend additional time and budget, so as already planned. The described method can be used to manage information risks of projects in any subject area.

Information technology of integrated management of threats and opportunities inIT projects

“…In paper [8], the author created a computer system for analyzing project indicators, consisting of subsystems for assessing the impact of environmental factors and simulating internal risks. This study will be useful in developing information technology for risk management in IT projects, taking into account the impact of threats and opportunities.…”

Development of an Anti-Risk Method of Optimizing Business Processes

“…Виклад основного матеріалу. Враховуючи дослідження, в яких автори рекомендують інтегрувати різні методи управління ризиком та з урахуванням сучасних вимог щодо нових підходів до управління ризиками, в роботі [16] був запропонований концепт інтегрованого управління інформаційними ризиками.…”

“…Враховуючи попередні розробки [22] та метод проведення ФВА [9], критерій вартості БП моделі "AS IS", представимо наступним чином (12):…”

“…2023. № 1 (7) 29 ризиками в проєктах діджиталізації в бізнесі на основі розроблених концептуальної та математичної моделей управління інформаційними ризиками [16,17].…”

Untitled

“…Some authors, S. Ilyashenko (2010) and O.B. Danchenko et al (2018), still consider it in the context of scientific research. The latter is reduced to defining it as scientific and innovative, which on the one hand, includes elements of tautology since the innovative activity consists of scientific activity.…”