social computing tools for risk management

8/3/2019 Social Computing Tools for Risk Management

1/23

Social Computing Tools

for Inter-organizationalRisk Management

Walter Castelnovo

Department of Informatics and CommunicationUniversity of Insubria (Italy)[email protected]


2/23

SUAP One Stop Shop for Production Activities (in Italy)

Case study: the cooperation context

SUAP a single point of access to services and

information for business offered by differentpublic authorities.

1

1. municipalities are put in charge of the functioning of the SUAP,that could also be shared by different municipalities;

2. the SUAP must give or deny a final authorization within a fixedterm defined by the law, having previously acquired all therequired authorizations from the competent agencies


3/23

SUAP the new Italian legislation


new measures have been defined, in order to favour the

In 2010 the Italian Government took new initiatives tomake it easier starting, transforming or closing a business:

1

complete digitalisation of inter-agencies communications andworkflows

the procedures for starting, transforming or closing a

business have been simplified by turning the currentlegislation from the traditional ex ante authorization regimeinto an ex-post controls regime.


4/23

SUAP The ex-post controls regime


Upon registering the SCIA (Certified Communication of the

start of a business) the SUAP has to operate all therequired controls within an interval of time defined by the

law (60 days).

1

If any of the controls detects some inadequacy, then thebusiness can be stopped:

- temporally until the inadequacy will be removed

- definitively, if the inadequacy can not be removed

otherwise it can operate without requiring any further

authorizations.


5/23

SUAP The problem with the new legislation


Small municipalities, as well as other public agencies

involved in the SUAPs activities, suffer from the lack ofresources (especially human resources, competences andskills)

1

People that should perform the ex post controls are likelyto be also allocated to other activities; thus, they couldhave difficulties to promptly operate the required controlson a given SCIA.


6/23

CONDITIONS FOR THE RISING OF RISKS

Risk Management

1. some choice or decision is required

2. there must be some uncertainty with respect to theeventual outcome

2

3. there must be a potential loss associated with asituation


7/23


8/23

THE TEAM RISK MANAGEMENT (TRM) MODEL(Software Engineering Institute - Carnegie Mellon University)

Inter-organizational Risk Management 2


9/23

The controls that must be operated by the SUAP most oftenconcern matters on which different public agencies havecompetences. This determines two relevant consequences:

Inter-organizational Risk Managementfor the SUAP

2

1. the decisions should be shared among all the agenciesinvolved

2. all these agencies should coordinate their control

activities, since a possible delay in one agencys activitycould have consequences on the final result of theprocessing of a SCIA.


10/23


11/23

1. BASELINE RISK ASSESSMENT

AIMS:

evaluate the potentialrisks involved


2

plan the execution ofthe control activities


12/23

2. TEAM REVIEW

AIMS:

To allow the partners

to jointly evaluate the


2

a shared risk evaluation.

to determine what is themore adequate risktreatment strategy to

assume


13/23

3. CONTINUOUS PROCESSES

Action planningredefine the partnerspriorities

tracking and control


2

routine risk identification and

analysisidentify new risks arising during

the partners day to day

activities

monitor the results of the riskhandling actions implemented


14/23

PROBLEM

Secondary risks

Risk treatment itself can introduce risks. These secondaryrisks should be handled.

Possible problems with the TRM model

3

risks should be handled at the interorganizational level

repeated execution of the team review process

TRM

MODEL


15/23

PROBLEM

(i) what risk management processes can be made moreefficient and effective, and how this can be done;

3Possible problems with the TRM model

(ii) what technologies and tools can be used to make theseprocesses more effective and efficient, both at the intra-organizational and at the inter-organizational level.


16/23

3

HOW TOMAKETHEBASELINERISK


ASSESSMENTMOREEFFICIENTAND

EFFECTIVE


17/23

3

HOW TOMAKETHETEAMREVIEW


MOREEFFICIENTANDEFFECTIVE


18/23

4

SOCIAL COMPUTING TOOLS

Social Computing tools for interorganizationalRisk Management


19/23

4Social Computing tools for interorganizationalRisk Management

A1 - Identify the experts toinvolve in the evaluationof the SCIA

a. browsing social networkprofiles

TOOLS SUPPORTING THE BASELINE RISK ASSESSMENT

A2 promptly inform them thattheir advise is needed

.

for help

c. Automatically generating aRSS feed


20/23


A3 support risk evaluation bygiving access to relevantinformation

a. Sharing information through

a Blog

b. Sharing the informationcontained in jointly created

TOOLS SUPPORTING THE BASELINE RISK ASSESSMENT

WIKIs

A4 collect the experts advices

a. Posting comments (riskevaluations) on a Blog

b. Uploading documents on ashared workspace


21/23


B1 sharing the decisions

a. Discussing each partner

decision on a Blog,possibly integrated withpolling mechanisms

TOOLS SUPPORTING THE TEAM REVIEW

face-to-face meetings b. Sharing the informationcontained in jointly createdWIKIs


22/23


B2 promptly informing the

partners of the occurrence ofsecondary risks

a. Posting a targeted

Microblog

b. AutomaticallyB3 rom tl informin the

TOOLS SUPPORTING THE TEAM REVIEW

B4 coordinating among thepartners the execution of therisk handling actions

Discussion on a Blogto achieve a sharedplanning

genera ng afeed

managers of what they haveto do and when


23/23


The best practices show that the highest chances of success

for the adoption of Social Computing tools depend on:1. the application of these tools to the core activities of the

organization

CONCLUSIONS

. e r n egra on w n ex s ng wor ows

Risk management is a central component of any

organisations strategic management

The adoption of the new participatory technologies and toolswithin the TRM is such that the Social Computing tools aredirectly integrated within existing workflows

social computing tools for risk management

Documents