Organizations manage their processes for two reasons:

1. To improve performance, e.g. through process redesign or the development of process-oriented application systems
2. To maintain compliance, e.g. by complying to voluntary (ISO, ITIL etc.) or mandated (Sarbanes-Oxley, HIPAA etc.) regulations,

While performance management has been addressed in many process publications, the management of risk and compliance in processes is a rather recent topic and has not been studied in much detail. Furthermore, the risk management and process management communities typically reside in different domains, with different vocabularies and documentation styles. CEBPI in conjunction with colleagues from QUT Brisbane and Monash University has started a research initiative to improve the risk management of business processes. 

If your company is interested in participating in this stream of research, please contact us.

1. zur Muehlen, M.;Rosemann, M.: Integrating Risks in Business Process Models. in 2005 Australasian Conference on Information Systems (ACIS 2005). 2005. Manly, Sydney, Australia.
2. Neiger, D.; Churilov, L.; zur Muehlen, M.; Rosemann, M.: Integrating Risks in Business Process Models with Value Focused Process Engineering. in Proceedings of the 14th European Conference on Information Systems (ECIS 2006). 2006. Göteborg, Sweden: AIS.
3. zur Muehlen, M. and D.T.-Y. Ho: Risk Management in the BPM Lifecycle. in Business Process Management Workshops: BPM 2005 International Workshops, BPI, BPD, ENEI, BPRM, WSCOBPM, BPS, Revised Selected Papers. 2006. Berlin: Springer.
4. Junkers, C.; zur Muehlen, M.; Baumgart, A.: A Procedure Model for the Identification of Risk in Business Processes. CTMR/CEBPI Working Paper, Howe School of Technology Management, Stevens Institute of Technology, August 2006.