Integrated Risk Management Process Assessment Model for IT Organizations based on ISO 31000 in an SO Multi-Standards Context

Barafort, B.; Mesquida, A.L.; Mas, A.

dc.contributor.author	Barafort, B.
dc.contributor.author	Mesquida, A.L.
dc.contributor.author	Mas, A.
dc.date.accessioned	2025-05-22T11:46:52Z
dc.identifier.citation	Barafort, B., Mesquida, A.L. i Mas, A. (2018). Integrated Risk Management Process Assessment Model for IT Organizations based on ISO 31000 in an SO Multi-Standards Context. Computer Standards & Interfaces, 60, 57-66. https://doi.org/10.1016/j.csi.2018.04.010	ca
dc.identifier.uri	http://hdl.handle.net/11201/170285
dc.description.abstract	[eng] With risk management as a key challenge for most organizations, aligning and improving organisational and business processes is essential. Capability and Maturity Models can contribute to assess and then enable process improvement. With the need to integrate risk management in IT Organizations (IT department/organisation), ISO/IEC 15,504–330xx process assessment approach combined with the latest version of ISO 31,000 for risk management can be the foundations for new process models. An integrated process-based approach with various popular and market demands ISO standards (ISO 9001, ISO 21,500, ISO/IEC 20,000–1 and ISO/IEC 27,001) is proposed in the paper; it explains how the Integrated Risk Management Process Assessment Model for IT Organizations in an ISO multi-standards context is developed with a Design Science research method.	en
dc.format	application/pdf	en
dc.format.extent	57-66
dc.publisher	Elsevier
dc.relation.ispartof	Computer Standards & Interfaces, 2018, vol. 60, p. 57-66
dc.rights	all rights reserved
dc.subject.classification	004 - Informàtica	ca
dc.subject.other	004 - Computer Science and Technology. Computing. Data processing	en
dc.title	Integrated Risk Management Process Assessment Model for IT Organizations based on ISO 31000 in an SO Multi-Standards Context	en
dc.type	info:eu-repo/semantics/article
dc.type	info:eu-repo/semantics/publishedVersion
dc.type	Article
dc.date.updated	2025-05-22T11:46:52Z
dc.date.embargoEndDate	info:eu-repo/date/embargoEnd/2100-01-01
dc.embargo	2100-01-01
dc.subject.keywords	Integrated risk management	en
dc.subject.keywords	Process Reference Model (PRM)	en
dc.subject.keywords	Design science research method	en
dc.subject.keywords	Process Assessment Model (PAM)	en
dc.subject.keywords	ISO/IEC 15504330xx	en
dc.rights.accessRights	info:eu-repo/semantics/closedAccess
dc.identifier.doi	https://doi.org/10.1016/j.csi.2018.04.010