
Proposal for a Risk Communication-Based Approach to IT Risk
Author(s) -
Ryo Sasaki
Publication year - 2017
Publication title -
journal of disaster research
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 0.332
H-Index - 18
eISSN - 1883-8030
pISSN - 1881-2473
DOI - 10.20965/jdr.2017.p1040
Subject(s) - risk analysis (engineering) , computer science , risk management , risk assessment , information system , it risk , computer security , data science , it risk management , knowledge management , business , engineering , finance , electrical engineering
With society’s increasing dependence on information technology (IT) systems, it is becoming increasingly difficult to resolve safety problems related to IT systems through conventional information security technology alone. Accordingly, under the heading of “IT risk” research, we have been investigating ways to address broader safety problems that arise in relation to IT systems themselves, along with the services and information they handle, in situations that include natural disasters, malfunctions, and human error, as well as risks arising from wrongdoing. Through our research, we confirmed that a risk communication-based approach is essential for resolving IT risk problems, and clarified five issues that pertain to a risk-based approach. Simultaneously, as tools to support problem resolution, we developed a multiple risk communicator (MRC) for consensus formation within organizations, along with Social-MRC for social consensus formation. The results of our research are detailed in this paper.