Axel Winkelmann

Modellierung und Management von Risiken : Ein prozessorientierter Risikomanagement-Ansatz zur Identifikation und Behandlung von Risiken in Geschäftsprozessen

ZusammenfassungDie Anzahl der gesetzlichen Vorschriften zum Identifizieren und Protokollieren von Risiken hat sich in den letzten Jahren vergrößert. Zahlreiche Gesetze zwingen die Unternehmen zu einem sorgfältigen Umgang mit Prozessrisiken. Die Verwendung von Prozessmodellen zur Dokumentation von Risiken sowohl in der Corporate Governance als auch im Speziellen in der IT-Governance ist als Nachweis-, Verifikations- und Prognosemöglichkeit sinnvoll, da Risiken im prozessualen Kontext leicht ersichtlich präsentiert und in das Risikomanagementhandbuch aufgenommen werden können.Der vorliegende Beitrag setzt sich mit dem State of the Art der prozessorientierten Risikomodellierung auseinander und spezifiziert eine Methode zur Modellierung der Risiken auf Basis der Ereignisgesteuerten Prozesskette (EPK). Ziel der Methode ist eine Visualisierung und somit Dokumentation und Veranschaulichung von Risiken. Da es sich um eine Erweiterung der EPK-Methode handelt, kann der Ansatz mit bestehenden Modellierungswerkzeugen für Auditverfahren und zur Erreichung und Erhaltung der Compliance im Unternehmen eingesetzt werden. Die Konstruktion entsprechender risikobehafteter Geschäftsprozesse unter Verwendung der hierfür entwickelten Modellierungstechnik wird anhand von Beispielen erläutert. Dabei wird die risikoorientierte EPK zusätzlich in das Konzept der adaptiven Informationsmodellierung eingebettet, um basierend auf einem Gesamtprozessmodell Modellvarianten zu generieren, die durch ihre fokussierte Darstellung und geringere Komplexität beispielsweise zur Identifizierung von IT-Einzelrisiken innerhalb des Unternehmens genutzt werden können.AbstractThe number of legal regulations in the field of risk identification and documentation has heavily increased in the last years. This situation forces various companies to take care of risk aspects within their processes. The use of conceptual models for risk documentation in the field of corporate governance as well as IT-governance leads to better risk verification, certification and prediction. Risks will become much more apparent within their process contexts. These conceptual models can even be used for the preparation of risk handbooks.The article deals with the state of the art of process-oriented risk modelling and proposes a risk modelling approach developed on the basis of the entity driven process chain (EPC). The method aims at improved visualization and documentation mechanisms of process-oriented risks. Due to its EPC-foundation this approach can be integrated in existing modelling tools for auditing purposes to reach and maintain compliance with risk regulations. The construction of risk-inherent process models with the proposed modelling approach will be depicted with some examples. Additionally, this approach is integrated in the concept of adaptive conceptual modelling to generate distinct views on the set of existing models. This leads to a focused presentation and a lower model complexity and enables herewith a more efficient risk identification and treatment.

Integration von Sach- und Dienstleistungen – Ausgewählte Internetquellen zur hybriden Wertschöpfung

ZusammenfassungAls Ergebnis einer Recherche zur hybriden Wertschöpfung werden Internetquellen zu interessanten Praxisbeispielen und Studien präsentiert, um die praktische Relevanz der Integration von Sach- und Dienstleistungen zu unterstreichen. Anhand einer Vielzahl an Forschungsprojekten zur hybriden Wertschöpfung, deren Webseiten untersucht und kategorisiert wurden, wird gezeigt, dass die hybride Wertschöpfung auch in der Forschung intensiv diskutiert wird. Die Ergebnisse der Internetrecherche verdeutlichen darüber hinaus eine große Begriffsvielfalt in der Bezeichnung von Kombinationen aus Sach- und Dienstleistungen, die eine Orientierung in diesem Themenbereich besonders erschwert.AbstractThe article presents results of an internet research on product-service systems. Web sites showing interesting practical examples and studies available online are presented to point out the practical relevance of innovative combinations of products and services. The multiplicity of research projects found on the internet shows that this phenomenon is also discussed intensively in research. These projects have been categorized by analyzing their web sites. Furthermore, the results of the internet research highlight a high diversity of terms for describing the concept of product-service systems. As a consequence, orientation in this subject area is hindered.

Online-Literaturdatenbanken im Bereich der Wirtschaftsinformatik: Bereitstellung wissenschaftlicher Literatur und Analyse von Interaktionen der Wissensteilung

Knowledge sharing is fundamental for innovations in the scientific community. The paper examines how the interaction of knowledge sharing is supported by online services. With respect to business information systems, a survey of online literature databases is given, providing an aggregation of various publication sources, a direct access to publications, and which are available to the public. Furthermore, special analysis services are presented which describe competitive interactions of knowledge sharing via rankings on the one hand, and cooperative interactions of knowledge sharing via co-authorship evaluation on the other.

Services in electronic telecommunication markets: a framework for planning the virtualization of processes

The potential of electronic markets in enabling innovative product bundles through flexible and sustainable partnerships is not yet fully exploited in the telecommunication industry. One reason is that bundling requires seamless de-assembling and re-assembling of business processes, whilst processes in telecommunication companies are often product-dependent and hard to virtualize. We propose a framework for the planning of the virtualization of processes, intended to assist the decision maker in prioritizing the processes to be virtualized: (a) we transfer the virtualization pre-requisites stated by the Process Virtualization Theory in the context of customer-oriented processes in the telecommunication industry and assess their importance in this context, (b) we derive IT-oriented requirements for the removal of virtualization barriers and highlight their demand on changes at different levels of the organization. We present a first evaluation of our approach in a case study and report on lessons learned and further steps to be performed.

Developing a Process-Oriented Notation for Modeling Operational Risks - A Conceptual Metamodel Approach to Operational Risk Management in Knowledge Intensive Business Processes within the Financial Industry

According to the Basel II committee operational risks are the least understood and manageable risks in banks. Operational risks in banks are closely linked to the underlying business process landscape. Recently, researchers have suggested to model this process landscape in banks with new semantic business process modeling approaches. These enable banks not only to model their business processes more efficiently, but also analyze them in a (semi-)automatic way for multiple purposes (e.g. process weakness identification, IT investment decisions etc.). In this paper we extend such a semantic business process modeling language (SBPML) for banks by a risk view for modeling and analyzing operational risks in business process models from a conceptual modeling perspective. As a result of a case study at a bank, seeking to combine business process management and risk management in an integrated approach, we present an enhanced metamodel of the SBPML, which enables banks to model and analyze their processes and operational risks in a holistic way.

Reference Process Flows for Telecommunication Companies

The telecommunication market is experiencing substantial changes. New business models, innovative services, and technologies require reengineering, transformation, and process standardization. Enterprise Architecture Frameworks support the transformation by specifying methods, procedures, and reference models. With the Enhanced Telecom Operation Map (eTOM), the TM Forum offers an international de facto reference process framework, based on specific features and requirements of the telecommunication industry. However, this reference framework only offers a hierarchical collection of processes on different levels of abstraction; a control view in terms of a sequential ordering of tasks and hence a real process flow as well as an end-to-end view on the customer are missing. In this paper, we extend the eTOM reference model by reference process flows, in which we abstract and generalize the knowledge about processes in telecommunication companies. With reference process flows, we aim to assist companies in achieving a structured and transparent re-structuring and re-design of their processes. We demonstrate the applicability and usefulness of our reference process flows in two case studies, and evaluate them by means of criteria for reference model evaluation. Our reference process flows have been accepted as a standard by the TM Forum and published as part of eTOM version 9. We further elaborate on those components of our approach which can be applied outside the telecommunication industry.

Towards a Conceptual Model for Trustworthy Skills Profiles in Online Social Networks

For many users online profiles displaying other people’s skills are increasingly important, e.g., when contracting freelancers or finding candidates for a job opening. However, current profiles found in information systems offer either unstructured free text that is hard to handle efficiently or simplistic rating schemes that do not convey meaningful information. In addition, it is unclear how trustworthy the information on the profile is. In this paper, we propose a novel approach to online skills profiles based on users’ confirmations and the SkillRank credibility ranking and describe its prototype implementation. As spadework, we set forth six basic requirements for online skill evaluations which should generally be reflected in corresponding IS design.

Constructing a Semantic Business Process Modelling Language for the Banking Sector – An Evolutionary Dyadic Design Science Approach

The need to extensively model business processes for multiple purposes (e.g., documentation, compliance management, analysis and optimisation etc.) is of major relevance to banks. Efficiently modelling and automatically analysing business process models not only in a syntactical but also in a semantic way becomes increasingly important in order to save costs during process model construction and achieve additional value from process modelling initiatives. In this article, we introduce a domain-specific semantic business process modelling language (BPML), which supports efficient modelling and semantic analysis needs of banks. We do this by adapting an existing domain-specific BPML from the public sector and applying an evolutionary design science research approach that covers several design science cycle iterations. We triangulate and evaluate the final design science artefact (a new semantic BPML for banks) with the help of a multi-method approach using interviews, round table discussions, document analysis, literature analysis and two in-depth case studies from a specialised bank and a universal bank in the financial sector.

Detecting Potential Weaknesses in Business Processes - An Exploration of Semantic Pattern Matching in Process Models

Purpose – Automating the task of identifying process weaknesses using process models is promising, as many organizations have to manage a large amount of process models. The purpose of this paper is to introduce a pattern-based approach for automatically detecting potential process weaknesses in semantic process models, thus supporting the task of business process improvement. Design/methodology/approach – Based on design research, combined with a case study, the authors explore the design, application and evaluation of a pattern-based process weakness detection approach within the setting of a real-life case study in a German bank. Findings – Business process weakness detection can be automated to a remarkable extent using pattern matching and a semantic business process modeling language. A case study provided evidence that such an approach highly supports business process analysts. Research limitations/implications – The presented approach is limited by the fact that not every potential process weaknes...

Modeling and Analysis of Business Process Compliance

Managing business process compliance is a highly important topic in the financial sector. Various scandals and last but not least the financial crisis have caused many new constraints and legal regulations that banks and financial institutions need to face. Based on a domain-specific semantic business process modeling notation, we propose a new approach to modeling and analysis of business process compliance through the use of compliance building block patterns and business rules. These business process compliance patterns and rules serve as a necessary basis for the automatic identification of compliance issues in existing processes (process models) and hence for managing business process compliance in the financial sector.