The Next Wave in IT Infrastructure Risk Management: A Causal Modeling Approach with Bayesian Belief Networks

摘要

The management of risks associated with information technology (IT) infrastructure becomes increasingly important, as companies may face severe negative outcomes in case of failures. This paper proposes a new approach to manage IT infrastructure risks even in highly dynamic environments. Currently, IT infrastructure and its risks are managed based on historical loss data, which allows very precise forecasts for potential risks in stable environments. However, this is not adequate for the increasing number of firms facing dynamic environments like outsourcing or merger scenarios. Therefore, the next wave in IT infrastructure risk management has to employ more qualitative methodologies. Based on an ongoing case study with two leading IT consultancies and a European service enterprise, this paper demonstrates, how causal modeling with Bayesian Belief Networks enables the prediction and, most important, the proactive management of IT infrastructure risks.