Query: Risk Management process

title: Risk Management Process

title: Do organizations use a formalized risk management process to address social media risk?
abstract: Social media use within the workplace is widespread; however, little is known about how organizations actually manage social media risk. We use the Committee of Sponsoring Organization's Enterprise Risk Management Integrated Framework (COSO, 2004) to develop a social media risk management model (SM RMM) that includes four components: (i) social media use, (ii) perceived risk of use, (iii) policy implementation, and (iv) training and technical controls. We utilize the model to examine whether the manner in which organizations address social media risk is consistent with a formalized risk management process. Survey data from 98 risk management, audit, and finance professionals shows that the extent of organizations' social media use increases the perceived risk of social media use. In addition, the effect of the extent of use on the implementation of social media policies is greater for organizations with higher levels of perceived risk of use. Finally, organizations with more extensive social media policies have more extensive training and technical controls. The study's findings indicate that organizations are adopting social media policies and controls in a reactive fashion, as opposed to using a formalized risk management process. This may unduly expose organizations to social media risks. Our model provides a framework for future research on social media risk management.

title: Risk Management Process

title: Risk management process

title: Assessing and Managing Risks Using the Supply Chain Risk Management Process (SCRMP)
abstract: This paper proposes a comprehensive and coherent approach for managing risks in supply chains.  Building on Tummala et al.'s (1994) Risk Management Process (RMP) this paper develops a structured and ready to use approach for managers to assess and manage risks in supply chains.  Supply chain risks can be managed more effectively when applying the Supply Chain Risk Management Process (SCRMP) The structured approach can be divided in the phases of risk identification, risk measurement and risk assessment; risk evaluation, and risk mitigation and contingency plans; and risk control and monitoring via data management systems. Specific techniques for conducting this process are suggested. While supply chain risk management is an emerging and important topic in our dynamic and interconnected world, conceptual frameworks providing a clear meaning and normative guidance are scarce (Manuj and Mentzer, 2008) This paper presents such a framework, offering structure and decision support for managers.

title: The Project Risk Management Process, a Preliminary Study
abstract: A process of risk management in projects is a rational chain of practices by which decision agents plan and execute actions and control the results in order to keep the implementation of the project under certain conditions (time, cost and quality parameters' set) With the purpose of providing guidelines for the selection of the best practices taking into account the organizational maturity and project complexity, a theoretical framework to classify and associate those practices to each phase of the project life cycle and to each project risk management process is proposed. Future research efforts will be directed towards refining the framework and testing it in multiple case studies.

title: A Supply Chain Risk Management process
abstract: Nowadays companies are faced with an increasing risk exposure. This is mainly caused by a greater dependence of supply chain partners on each other, e.g. due to the close integration of their business processes aiming at the reduction of channel inventory. Based on findings from the literature and results from an empirical investigation, a model for an inter organisational risk management process is introduced. It is shown how a top down approach can be used as a methodology for efficient risk identification. In addition an empirical based evaluation of supply chain risk sources and risk mitigation measures is integrated in this model.

title: Measuring project risk management process for construction contractors with statement indicators linked to numerical scores
abstract: There is relatively low implementation of formal project risk management methods in practice, leading to the construction industry consistently suffering from poor project performance. This study aims to ascertain the extent to which current project risk management practices are used by construction contractors in one of the countries of the sub Saharan region Malawi. A management process tool with statement indicators linked to numerical scores was conceived that characterised a series of steps of project risk management process. To ascertain the degree to which project risk management processes were used, a questionnaire survey was employed. Data were elicited from registered Malawian construction contractors on the elements underlining a series of steps of project risk management process as espoused by the literature. Out of 84 sampled construction contractors, 51 completed questionnaires were received. Apart from large sized and more experienced const.

title: A framework for integrated risk management process using survival analysis approach in information security
abstract: In this paper, we attempt to introduce a new method for performing risk analysis studies by effectively utilizing the existing risk management process framework with adoptions of medical approaches namely survival analysis approach. Under survival analysis approach, a method which is known as Cox Proportional Hazards (PH) Model will be applied in order to identify potential threats to information security. The risk management process is in this research will be based on Australian/New Zealand Standard for Risk Management (AS/NZS 4360:1999) AS/NZS 4360:1999 provides a sequencing of the core part of the risk management process into sub processes for identify context, identify risks, analyze risks, evaluate risks and treat risks. Moreover, it seems that the integration of risk management process and survival analysis indeed brings very useful new insights. Thus, the contribution of the paper will be introducing a new method for performing a risk analysis studies in information security domain.

title: The augmented subjective risk management process
abstract: This paper aims to present an augmented subjective risk management process that can partially solve the problem of inconsistent results in qualitative risk management. Note that "subjective" in this context is to separate this risk management process from the purely statistical risk management processes often associated with finance. The approach has been developed by logically approaching the problem of inconsistency and, based on experience and literature review, conceptually designing a solution. The presented approach seems workable and indeed an improvement over standard qualitative approaches given reasonable skillful implementation. The approach has not yet been tested in real life, which must be undertaken in the future. The presented approach will expand the subjective risk management process to include information management and to some extent knowledge management and thus add some more ac.