Ändra sökning
RefereraExporteraLänk till posten
Permanent länk

Direktlänk
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annat format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annat språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf
A probabilistic approach to IT risk management in the Basel regulatory framework: A case study
School of Economics and Business in Sarajevo, Bosnia and Herzegovina.
RISE - Research Institutes of Sweden, ICT, SICS. (Software and Systems Engineering Laboratory)ORCID-id: 0000-0003-2017-7914
2017 (Engelska)Ingår i: Journal of Financial Regulation and Compliance, ISSN 1358-1988, E-ISSN 1740-0279, Vol. 25, nr 2, s. 176-195Artikel i tidskrift (Refereegranskat) Published
Abstract [en]

Purpose: This paper aims to examine the connection between information system (IS) availability and operational risk losses and the capital requirements. As most businesses today become increasingly dependent on information technology (IT) services for continuous operations, IS availability is becoming more important for most industries. However, the banking sector has particular sector-specific concerns that go beyond the direct and indirect losses resulting from unavailability. According to the first pillar of the Basel II accord, IT outages in the banking sector lead to increased capital requirements and thus create an additional regulatory cost, over and above the direct and indirect costs of an outage. Design/methodology/approach: A Bayesian belief network (BBN) with nodes representing causal factors has been used for identification of the factors with the greatest influence on IS availability, thus helping in investment decisions. Findings: Using the BBN model for making IS availability-related decisions action (e.g. bringing a causal factor up to the best practice level), organization, according to the presented mapping table, would have less operational risk events related to IS availability. This would have direct impact by decreasing losses, related to those events, as well as to decrease the capital requirements, prescribed by the Basel II accord, for covering operational risk losses. Practical implications: An institution using the proposed framework can use the mapping table to see which measures for improving IS availability will have a direct impact on operational risk events, thus improving operational risk management. Originality/value: The authors mapped the factors causing unavailability of IS system to the rudimentary IT risk management framework implied by the Basel II regulations and, thus, established an otherwise absent link from the IT availability management to operational risk management according to the Basel II framework.

Ort, förlag, år, upplaga, sidor
2017. Vol. 25, nr 2, s. 176-195
Nyckelord [en]
Availability incidents, Basel regulatory framework, IT risk
Nationell ämneskategori
Data- och informationsvetenskap
Identifikatorer
URN: urn:nbn:se:ri:diva-31139DOI: 10.1108/JFRC-06-2016-0050Scopus ID: 2-s2.0-85017561608OAI: oai:DiVA.org:ri-31139DiVA, id: diva2:1136203
Tillgänglig från: 2017-08-25 Skapad: 2017-08-25 Senast uppdaterad: 2023-06-08Bibliografiskt granskad

Open Access i DiVA

Fulltext saknas i DiVA

Övriga länkar

Förlagets fulltextScopus

Person

Franke, Ulrik

Sök vidare i DiVA

Av författaren/redaktören
Franke, Ulrik
Av organisationen
SICS
I samma tidskrift
Journal of Financial Regulation and Compliance
Data- och informationsvetenskap

Sök vidare utanför DiVA

GoogleGoogle Scholar

doi
urn-nbn

Altmetricpoäng

doi
urn-nbn
Totalt: 73 träffar
RefereraExporteraLänk till posten
Permanent länk

Direktlänk
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annat format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annat språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf