INFORMATION RISK MANAGEMENT METHOD IN DIGITALIZATION PROJECTS OF BUSINESS PROCESSES

Abstract

Risk management, in particular information risk, has always been the number one task in the development and implementation of any project. Digitalization projects are especially sensitive to information risks, therefore risk management is constantly looking for protection mechanisms. In the article, the authors analyzed some of the risk management methods proposed by other scientists. At the same time, there are still a number of issues in information risk management in the process of business digitalization. Among the methods that allow minimizing the likelihood of risk events occurring is the methodology for applying business process reengineering, which was used in the development of a new anti-risk method. At the same time, it is proposed to investigate the effectiveness of optimization of business processes through functional cost analysis (FCA) and determine its impact on the performance of the project as a whole. For clarity, the developers of the method propose an algorithm for optimizing the business process using a modified FCA, which is an integral part of the information risk management method of the project. The main idea of the method is that on the basis of the developed conceptual model of the project with its planned time and cost, they carry out identification and analysis of possible information risks, additionally plan certain amounts of reserve time and costs in case of a threat of risk events. That is, as a result of such options, business processes are optimized, information risks are analyzed, and the identification of new information risks during monitoring is repeated, the process is repeated until all possible risks are identified and analyzed, while the project does not spend additional time and budget, so as already planned. The described method can be used to manage information risks of projects in any subject area.