Alexander M. Ernst is a research assistant at the chair for Software Engineering for Business Information Systems (sebis) at the Technische Universität München (TU München).

His research interests center around methods, models and tools for the management of enterprise architectures and application landscapes as part thereof. In this area, he is especially interested in retrieving, documenting and enhancing enterprise architecture management patterns and their application in practice and academia.

Presentation

Models, Methods, and Tools for enterprise-wide risk management

Enterprise-wide risk management as well as enterprise architecture management (EAM) is based on a holistic view on the enterprise addressing both – business and IT aspects in an integrated manner. Taking operational risks into account, it is necessary to consider the various dependencies between the elements of the EA, like goals, organizational units, business processes, business applications, and IT infrastructure elements. Thereby, operational risks, e.g. concerning availability, can only be appropriately assessed if a suitable method to address the respective concern is available.

This presentation gives an overview about the capabilities of EAM patterns in the context of enterprise-wide risk management. Alongside the application example of availability a management method, explicating the required activities to address the management capability of high available systems, is used to demonstrate the usefulness of visualizations to support the collaborative decision making process between various stakeholders. In addition a model for availability is discussed, which identifies the respective information necessary to support the assessment process. In order to complement the proposed approach a tool, which supports the generation of visualizations out of repository content is introduced.

Key Takeaways

• How to explicate operational risks in EA models
• What metrics can be used to quantify operational risks
• How does tool support to generate visualizations support the communication of enterprise-wide risks

return to program