1. Viable IT Risk Management System by Viable System Model (VSM): Action Research for Managing IT-related Risk in the Banking Service.
- Author
-
Arghand, Ali Akbar
- Subjects
- *
ACTION research , *SCIENTIFIC models , *BANKING industry , *RISK management in business - Abstract
In recent years, some standards and frameworks proposed the risk management structures for managing and controlling IT risk that is the main component of enterprise governance of IT. Unfortunately, these frameworks have a retrospective view of threat analysis and less pay attention to future threats in the business environment, and do not propose adaptable solutions. At the same time, the current risk framework is not based on a strong scientific system modeling. In this research, the researcher proposed the Viable System Model (VSM) as an adaptable and comprehensive framework that is based on scientific modeling with the systematic approach for managing and controlling IT risk in today's complex business environment. This research did in a systematic action research methodology in the banking context in Iran. The results showed that by applying the VSM as a framework for managing IT risk, adaptability of IT risk criteria according to the future threats can be achieved by this framework. A comprehensive risk management framework (retrospective and prospective view) with a systematic approach could be achieved by this system modeling. [ABSTRACT FROM AUTHOR]
- Published
- 2022
- Full Text
- View/download PDF