Modeling Enterprise Risk Management and Security with the ArchiMate® Language (Version 2.1)

The importance of Enterprise Risk Management (ERM) and security rises with the progress of globalization and growth of the Internet. An increasing number of organizations interact with consumers and trading partners around the world, and are therefore exposed to an increasing variety of risks. In this context, organizations need to understand the variables that affect their operations, so describing, classifying, managing, and mitigating risk factors is very important.

Enterprise Architects must help organizations manage risk through architectures that help avoid, transfer, mitigate, or accept adverse risks. Risk and security models help organizations develop guidance and take action to embrace opportunity and manage risk. This White Paper examines a selection of well-established paradigms for risk and security modeling and analysis, extracts a set of core concepts from them, and maps most of the concepts to ArchiMate language elements.