你不能在没有"I-S"的情况下拼写风险:财富1000强公司披露信息系统风险
Jonathan Whitaker1, Shital Thekdi1
1Robins School of Business, University of Richmond, Richmond, Virginia, USA.
Risk analysis : an official publication of the Society for Risk Analysis
|September 7, 2024
概括
大型企业面临的信息系统 (IS) 除了网络安全之外的许多风险. 这项研究将财富1000强公司引用的实际IS风险实证地映射到一个新的框架中,揭示了网络攻击和软件故障等关键问题.
科学领域:
- 信息系统风险管理 信息系统风险管理
- 公司治理 公司治理
- 业务连续性规划 企业连续性规划
背景情况:
- 网络安全是大型企业的主要关注点,造成破坏和财务成本.
- 现有的信息系统 (IS) 风险框架缺乏最近的更新和经验验证.
- 没有先前的研究实证地将大公司引用的实际IS风险映射到既定的框架中.
研究的目的:
- 解决大公司面临的IS风险经验研究的差距.
- 开发和验证一个新的框架,对25种IS风险进行分类.
- 分析财富1000强公司报告中引用的IS风险的频率和类型.
主要方法:
- 对第1A项 (风险因素) 分析 2020财年所有财富1000强公司的SEC表格10-K的文本数据.
- 开发一个新的框架,将25个已识别的IS风险分为四个象限和10个类别.
- 量化编码和分析每家公司的IS风险引用,并进行额外的行业和财务分析.
主要成果:
- 几乎所有的财富1000强公司都提到网络攻击的风险.
- 90%的公司提到软件/硬件故障风险.
- 数据隐私合规风险 (70%) 和互联网/停电,人为错误以及自然灾害/恐怖主义风险 (60%) 也很普遍.
结论:
- 网络攻击和系统故障是大公司中最常被引用的IS风险.
- 该研究为理解当前的IS风险景观提供了一个经验基础的框架.
- 调查结果强调需要更新风险管理策略,考虑到各种IS威胁.
相关概念视频
01:21Types of Reports II: Incident or Occurrence Report
809
An Incident or Occurrence Report in a healthcare setting is a crucial document used to record any unexpected occurrence that may or may not have affected a patient, employee, or visitor. Such reports are critical to improving patient safety and include all details leading up to and including the event.
Purposes:
In the healthcare industry, reports play a crucial role in documenting incidents within an agency. The primary objective of these reports is to ensure patient safety, uphold the...
Purposes:
In the healthcare industry, reports play a crucial role in documenting incidents within an agency. The primary objective of these reports is to ensure patient safety, uphold the...
809
01:30Health Information Technology and Healthcare Information System
811
Health Information Technology (HIT)
Health Information Technology, commonly called HIT, integrates advanced information systems and technology in healthcare settings. Its primary functions include:
Health Information Technology, commonly called HIT, integrates advanced information systems and technology in healthcare settings. Its primary functions include:
811
01:18Guidelines and Strategies for Safe Computer Charting
798
The guidelines and strategies provided by the American Nurses Association (ANA) and the Canadian Nurses Association (CNA) offer essential principles for ensuring safe and secure computer charting systems in healthcare settings. Let's break down each recommendation:
Maintain Confidentiality and Security:
Maintain Confidentiality and Security:
798
01:06Legal Guidelines for Documentation
1.3K
The legal guidelines for nursing documentation are essential for ensuring accurate, professional, and ethical recording of patient care. The guidelines are discussed here:
1.3K
01:22Healthcare Associated Infections II: Preventive Measures
2.6K
Essential infection prevention measures are based on the knowledge of the infection chain, the modes of transmission in healthcare settings, and the use of the best practices in all healthcare settings. Compulsory public reporting of healthcare-associated infection rates is needed to allow individuals and the community to make informed choices regarding selecting a healthcare facility.
The best practices for preventing healthcare-associated infections include hand hygiene, patient risk...
The best practices for preventing healthcare-associated infections include hand hygiene, patient risk...
2.6K
01:25Ethical Standards I
784
The American Nurses Association (ANA) created and implemented the first nationally accepted Code of Ethics for Nurses with Interpretive Statements. The Code of Ethics is a living document regularly updated by the ANA and establishes an ethical standard that is non-negotiable for nurses in all roles and settings.
The Code of Ethics provisions outline the nurse's duty to the patient, the healthcare team, the profession, and society. The Code's fundamental principles include advocacy,...
The Code of Ethics provisions outline the nurse's duty to the patient, the healthcare team, the profession, and society. The Code's fundamental principles include advocacy,...
784