INFORMATION SYSTEMS IN MANAGEMENT V - SGGW

INTEGRATED RISK MANAGEMENT IN IT ENTERPRISES
Dariusz Dymek
Department of Computing Systems,
Cracow University of Economics
Abstract: The IT enterprises are the kind of the investment enterprises and
as such they are divided into few phases. Each phase has its unique characteristic
and covers the different kinds of activities. It means that during each
phase there are different kinds of risk. For the successful risk management
different methods of risk management must be incorporated into the one
integrated system. This paper presents the conditions that such an integrated
system must fulfil.
Key words: risk management, investment enterprise, IT project
management.
1. INTRODUCTION
IT enterprises are the kind of investment enterprises. Their distinguishing feature
is the key role of the Information Technology in achieving the enterprise goals.
However, the information technology is only a tool to achieve the organizational
goals, and the result is not an information system (IS) but the ability of organization
to fulfill its strategic plans. The IT enterprise as any kind of investment enterprise
is divided into three main phases: the preparation, the implementation and the
usage ones (Dymek 2008a; see also Stabryła 2006; Rogowski & Michalczewski,
2005). Each of these phases has its own objectives, which should summarize to
primary business goals. Therefore,
− the preparation phase is responsible for the operationalization of business
goals, the analyze of the possible solutions and choosing the better one with the
respect to organizational abilities, market conditions, etc. During this phase, the
plan of all activities, which should be taken at the whole enterprise and goals
for next phases are also prepared.
− the implementation phase in case of IT enterprise has a project form. The aim
of this phase is to develop the IS within the conditions such as budget, time
schedule and specification, indicated at the previous phase.
− at the usage phase, the created in previous phase tools (IT based systems) are
used to achieve primary indicated organizational goals.
Each of the phases is characterized by different activities connected with their objectives.
It means that during each of phases there are different kinds of risk.
The characteristic of these risks is made in section 2. Different kinds of risk need
17