IT risk identification and evaluation: A case study on XYZ University

Abstract

The purpose of this paper is to demonstrate that Failure Mode Effect Analysis (FMEA) can be applied to the educational field to identify various failure modes and its potential failure effect that could occur in anytime. FMEA is widely used in a design, a manufacturing or assembly process, or a product and service for identifying all possible failures. Risk identification is part of risk management. Therefore it is a critical first step of it. This paper is a case study on XYZ University which trying to implement risk management which only focused on how to identify the risk using FMEA. FMEA needs some parameters to be defined which are severity values, the likelihood of occurrence, and detection. Risk Priority Number (RPN) is a matrix that indicates potential risk calculated by multiplying the three components, and it used to classify which should be taken care of first based on the highest RPN value. Filtering the ticketing system and mapped the incidents that happened to the current business process is how the data collected, also the interview to end user for validation. The result of this paper is astonishing because it is different from the initial expectation that business process like LMS or network facility will get the highest RPN value, but after doing all the process, it is found that telecommunication is at the top. Surely this provides a new perspective to risk management to be slicker in handling potential one.