The Consistency of Using Failure Mode Effect Analysis (FMEA) on Risk Assessment of Information Technology

摘要

FMEA is a helpful method for analyzing and giving priority to the risks of Information Technology. Even so, FMEA has weaknesses in the consistency of risk assessment results because a variety of dynamic situations. Risk priorities may differ due to the influence of subjectivity and potentially provide inaccuracies in risk management. This study aims to analyze the consistency of risk assessments based on FMEA. The object of risk assessment in this study is a commercial bank in Indonesia conducted by two different teams to test consistent results. This consistency analysis is carried out through (1) gap analysis, and (2) qualitative methods to identify the causes of different risk assessments. This study found that: (1) prioritization methods used, (2) procedures for assessing risks, (3) skills and knowledge of the people or teams involved, and (4) the ability of facilitators to conduct FMEA-based risk assessments are four main things which causes inconsistencies. This study also recommends some improvements or adjustments to the FMEA method according to the conditions of the company.