A SERVICE-ORIENTED APPROACH TO THE IDENTIFICATION OF IT RISK
Jakub Miler · 2005
Summary This paper outlines an approach to the identification of IT-related risk. The risk is identified from the perspective of the services provided by a software system to the users. The approach assumes the investigation of the service failures with the use of failure mode keywords. The service-based risk identification is supplemented with checklists extracted from standards and classical techniques of security analysis. The approach has been used in two case studies also reported in the paper.