INFORMATION SYSTEMS IN MANAGEMENT V - SGGW

different methods of management. In section 3, the brief description of these methods
is presented. The problem is that these methods are used separately in different
phase. The success of the enterprise is the resultant of activities carried out in every
phase that cannot be treated separately. Therefore, integrated risk management on
the level of the entire enterprise needs integrated approach to enterprise itself. In
section 4, some basic assumptions for an integrated system are presented.
2. RISK IN IT ENERPRISE
The risk as a concept is linked with the uncertainty of future events that are
connected with activities taken in present. In modern approach, the distinction
among the risk and the uncertainty is based on the capability of the prediction of
future events and their probability. If this probability can be estimated, we talk
about risk. In opposite case, it is the uncertainty itself.
The source of uncertainty lies in the environment, but the source of risk is a
human himself, taking a decision without the full knowledge about the environment
and the certainty of the effects of the undertaken activities. This information
gap is, in the inextricable way, inscribed in every human activity and is strictly
connected with the risk.
Each of enterprise phases includes different activities, which are connected
with the different kinds of risk (see table 1). Sources of risk for each phase can be
divided into two basic originations. The first one concerns the environment itself
and the second one concerns the knowledge about this environment
18
Figure 1 Relation among the enterprise phases and the kinds of risk.
Preparation
Enterprise risk
Project risk Operational risk
Implementation
Investment risk
Enterprise phases
Source: Own preparation.
Usage