Exportar Publicação

Rosa, M., Guerreiro, S. & Pereira, R. (2020). On IT risk management ontology using DEMO. In Aveiro, D., Dietz, J., and Filipe, J. (Ed.), IC3K 2020 - Proceedings of the 12th International Joint Conference on Knowledge Discovery, Knowledge Engineering and Knowledge Management. (pp. 258-266). Virtual, Online: SciTePress.

M. Rosa et al.,  "On IT risk management ontology using DEMO", in IC3K 2020 - Proc. of the 12th Int. Joint Conf. on Knowledge Discovery, Knowledge Engineering and Knowledge Management, Aveiro, D., Dietz, J., and Filipe, J., Ed., Virtual, Online, SciTePress, 2020, vol. 2, pp. 258-266

@inproceedings{rosa2020_1766585743181,
	author = "Rosa, M. and Guerreiro, S. and Pereira, R.",
	title = "On IT risk management ontology using DEMO",
	booktitle = "IC3K 2020 - Proceedings of the 12th International Joint Conference on Knowledge Discovery, Knowledge Engineering and Knowledge Management",
	year = "2020",
	editor = "Aveiro, D., Dietz, J., and Filipe, J.",
	volume = "2",
	number = "",
	series = "",
	doi = "10.5220/0010146002580266",
	pages = "258-266",
	publisher = "SciTePress",
	address = "Virtual, Online",
	organization = "",
	url = "https://www.scitepress.org/ProceedingsDetails.aspx?ID=74l+PGZPwU0=&t=1"
}

TY  - CPAPER
TI  - On IT risk management ontology using DEMO
T2  - IC3K 2020 - Proceedings of the 12th International Joint Conference on Knowledge Discovery, Knowledge Engineering and Knowledge Management
VL  - 2
AU  - Rosa, M.
AU  - Guerreiro, S.
AU  - Pereira, R.
PY  - 2020
SP  - 258-266
SN  - 2184-3228
DO  - 10.5220/0010146002580266
CY  - Virtual, Online
UR  - https://www.scitepress.org/ProceedingsDetails.aspx?ID=74l+PGZPwU0=&t=1
AB  - Nowadays, organisations use and rely on Information Technology (IT) solutions. However, despite their benefits, IT solutions induct risks. Consequently, organisations implement Risk Management (RM), more specifically Information Technology Risk Management (IT RM), in order to maximize the effectiveness of IT usage while dealing with IT risks. Nevertheless, IT RM's implementation is not easy, since numerous standards and frameworks propose multiple RM processes to deal with IT risks. Moreover, these processes are composed of different activities causing confusion. In the end, organisations are not capable of managing risks successfully due to IT RM's complexity. To overcome IT RM diversity, a Systematic Literature Review (SLR) was conducted. The goal is to identify which are the most essential IT RM activities. The SLR results were then integrated with ISO 31000 and PMBOK standards in the form of an ontology using Design and Engineering Methodology Ontology (DEMO). The contributions of this study are: the aggregate analysis of IT RM activities through the SLR; the identification of reasons and benefits of using DEMO; a description of an IT RM's essential model designed as an ontology; and a critical view of the benefits of the ontological model proposed.
ER  -