Risk management for it in the large

Abstract

This paper presents a systematic approach to manage the risks within the acquisition of services and systems. The risk management approach is based upon situational factors which are root causes of risks. Strategy options for a service execution approach and a service control approach are offered to mitigate risks in large, complex and uncertain IT undertakings. The resulting service delivery strategy constitutes the preliminaries to plan a sequence of decision points for the acquisition. The approach allows also to determine actions which attack the root causes of risks which is vital for the success of a risk management approach. The approach may be used by customer organisations and by supplier organisations.