Knowledge Driven Enterprise Risk Management

In this paper we describe a knowledge management approach for addressing enterprise-level risks and present our experiences in piloting its implementation within a large, multi-organizational enterprise. Our approach facilitates cross organizational discussion and enables enterprise-level perspectives in risk identification, analysis and management thereby avoiding the dangerous pitfalls of silo-approach to risk management. Our tool consists of two parts: (1) a knowledge management tool that enables the collection, and visualization, of risk data and collaboration among risk managers of various organizations within an enterprise (2) an Enterprise Risk Management (ERM) risk assessment and analysis workbench that enables risk managers to (a) qualitatively analyze the interrelationships among various risk elements, and their impact on business objectives and (b) quantitatively assess the risk exposure, and the impact of risk mitigation projects. To the best of our knowledge this is the first of its kind of a tool that provides a knowledge management based approach to enterprise risk management.

By: Nitin Nayak, Rama Akkiraju

Published in: Proceedings of the 2012 Annual SRII Global Conference (SRII)Los Alamitos, CA, , IEEE Computer Society. , p.564-73 in 2012

LIMITED DISTRIBUTION NOTICE:

This Research Report is available. This report has been submitted for publication outside of IBM and will probably be copyrighted if accepted for publication. It has been issued as a Research Report for early dissemination of its contents. In view of the transfer of copyright to the outside publisher, its distribution outside of IBM prior to publication should be limited to peer communications and specific requests. After outside publication, requests should be filled only by reprints or legally obtained copies of the article (e.g., payment of royalties). I have read and understand this notice and am a member of the scientific community outside or inside of IBM seeking a single copy only.

rc25329.pdf

Questions about this service can be mailed to reports@us.ibm.com .