Integrating value modeling and legal risk management: an IT case study

Abstract

Companies need to be able to demonstrate compliance with rules and regulations, especially start-ups who typically do not have the legal expertise to identify, assess and address legal risks of initial business ideas, nor do they have the resources to hire such expertise. Tools could help them identify and deal with legal risk at an early stage. Existing research in BPM focuses on compliance verification of a consolidated business model by checking the ability of a company to comply with the standards. The challenge is to apply a 'continuous improvement' by steering the business on values. Moreover, legal choices typically sit at the strategic level, and not only at the operational level. In this paper, we therefore propose an approach to handle legal risks as part of business model development.The approach makes use of Continuous Business Model Planning method, a value-driven modeling approach for strategic planning, and legal argumentation. The suitability and potential usefulness of the approach is illustrated by a study of the Kenyan court case Lipisha & BitPesa vs. Safaricom.

Role of Cybersecurity Legal Frameworks in Shaping the Risk Preparedness of the Telecommunication Sector in Safaricom Head Office, Nairobi, Kenya

“…If the findings stress teamwork, community engagement, and a sense of shared wealth, they may be consistent with Kenya's or other African countries' broader national development goals (Musya et al, 2023). Safaricom, as a key player in Kenya's telecommunications sector, is an appropriate case study for investigating how legal frameworks influence risk management techniques within the business (Muthuri et al, 2022). The primary goal is to understand how Safaricom navigates the complex legal landscape, corresponds to its cybersecurity policies with regulatory requirements, and addresses the obstacles to maintaining compliance.The potential for significant ramifications should the security of these networks be compromised underscores the importance of researching cybersecurity legal frameworks and risk preparedness strategies.…”