{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,8]],"date-time":"2026-10-08T18:37:52Z","timestamp":1791484672183,"version":"4.3.4"},"reference-count":52,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2010,5,4]],"date-time":"2010-05-04T00:00:00Z","timestamp":1272931200000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Inf Syst Front"],"published-print":{"date-parts":[[2011,9]]},"DOI":"10.1007\/s10796-010-9235-3","type":"journal-article","created":{"date-parts":[[2010,5,3]],"date-time":"2010-05-03T07:42:27Z","timestamp":1272872547000},"page":"595-611","source":"Crossref","is-referenced-by-count":44,"title":["RiskM: A multi-perspective modeling method for IT risk assessment"],"prefix":"10.1007","volume":"13","author":[{"given":"Stefan","family":"Strecker","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"David","family":"Heise","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ulrich","family":"Frank","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2010,5,4]]},"reference":[{"issue":"3","key":"9235_CR1","doi-asserted-by":"crossref","first-page":"345","DOI":"10.1007\/s10270-007-0061-0","volume":"7","author":"C Atkinson","year":"2008","unstructured":"Atkinson, C., & Kuehne, T. (2008). Reducing accidental complexity in domain models. Software & Systems Modeling, 7(3), 345\u2013359.","journal-title":"Software & Systems Modeling"},{"issue":"5","key":"9235_CR2","doi-asserted-by":"crossref","first-page":"437","DOI":"10.1108\/00251749910274216","volume":"37","author":"K Bandyopadhyay","year":"1999","unstructured":"Bandyopadhyay, K., Mykytyn, P. P., & Mykytyn, K. (1999). A framework for integrated risk management in information technology. Management Decision, 37(5), 437\u2013444.","journal-title":"Management Decision"},{"issue":"7","key":"9235_CR3","first-page":"15","volume":"34","author":"WJ Boczany","year":"1983","unstructured":"Boczany, W. J. (1983). Justifying Office Automation. Journal of Systems Management, 34(7), 15\u201319.","journal-title":"Journal of Systems Management"},{"issue":"2","key":"9235_CR4","doi-asserted-by":"crossref","first-page":"170","DOI":"10.1016\/j.accinf.2005.10.005","volume":"7","author":"C Carnaghan","year":"2006","unstructured":"Carnaghan, C. (2006). Business process modeling approaches in the context of process level audit risk assessment: An analysis and comparison. International Journal of Accounting Information Systems, 7(2), 170\u2013204.","journal-title":"International Journal of Accounting Information Systems"},{"issue":"10","key":"9235_CR5","doi-asserted-by":"crossref","first-page":"2636","DOI":"10.1016\/j.jbankfin.2005.11.008","volume":"30","author":"V Chavez-Demoulin","year":"2006","unstructured":"Chavez-Demoulin, V., Embrechts, P., & Neslehova, J. (2006). Quantitative models for operational risk: Extremes, dependence, and aggregation. Journal of Banking & Finance, 30(10), 2636\u20132658.","journal-title":"Journal of Banking & Finance"},{"issue":"2","key":"9235_CR6","first-page":"187","volume":"19","author":"RT Clemen","year":"1999","unstructured":"Clemen, R. T., & Winkler, R. L. (1999). Combining Probability Distributions From Experts in Risk Analysis. Risk Analysis, 19(2), 187\u2013203.","journal-title":"Risk Analysis"},{"key":"9235_CR7","volume-title":"Risk management","author":"M Crouhy","year":"2001","unstructured":"Crouhy, M., Galai, D., & Mark, R. (2001). Risk management. New York: McGraw-Hill."},{"issue":"3","key":"9235_CR8","doi-asserted-by":"crossref","first-page":"358","DOI":"10.1016\/j.datak.2005.07.007","volume":"58","author":"I Davies","year":"2006","unstructured":"Davies, I., Green, P., Rosemann, M., Indulska, M., & Gallo, S. (2006). How do practitioners use conceptual modeling in practice? Data & Knowledge Engineering, 58(3), 358\u2013380.","journal-title":"Data & Knowledge Engineering"},{"key":"9235_CR9","volume-title":"Multiperspektivische Unternehmensmodellierung: Theoretischer Hintergrund und Entwurf einer objektorientierten Entwicklungsumgebung","author":"U Frank","year":"1994","unstructured":"Frank, U. (1994). Multiperspektivische Unternehmensmodellierung: Theoretischer Hintergrund und Entwurf einer objektorientierten Entwicklungsumgebung. M\u00fcnchen: Oldenbourg."},{"key":"9235_CR10","unstructured":"Frank, U. (2006). Towards a Pluralistic Conception of Research Methods in Information Systems Research. Institute for Computer Science and Business Information Systems (ICB), Duisburg-Essen University. ICB Research Report 7."},{"key":"9235_CR11","unstructured":"Frank, U. (2008). The MEMO Meta Modelling Language (MML) and Language Architecture. Institute for Computer Science and Business Information Systems (ICB), Duisburg-Essen University. ICB Research Report 24."},{"issue":"2","key":"9235_CR12","doi-asserted-by":"crossref","first-page":"93","DOI":"10.1007\/s10257-006-0034-9","volume":"5","author":"U Frank","year":"2007","unstructured":"Frank, U., & Lange, C. (2007). E-MEMO: a method to support the development of customized electronic commerce systems. Information Systems and E-Business Management, 5(2), 93\u2013116.","journal-title":"Information Systems and E-Business Management"},{"key":"9235_CR13","unstructured":"Frank, U. (1999). Conceptual Modelling as the Core of the Information Systems Discipline\u2014Perspectives and Epistemological Challenges Proceedings of the Fifth Americas Conference on Information Systems (AMCIS 99), Milwaukee, WI. 695\u2013697."},{"key":"9235_CR14","unstructured":"Frank, U. (2002). Multi-perspective enterprise modeling (MEMO): Conceptual framework and modeling languages Proceedings of the 35th Annual Hawaii International Conference on System Sciences (HICSS). Honululu, HI, 72\u201382."},{"key":"9235_CR15","unstructured":"Frank, U., Heise, D., Kattenstroth, H., & Schauer, H. (2008). Designing and Utilising Business Indicator Systems within Enterprise Models\u2014Outline of a Method. In Loos P, N\u00fcttgens M, Turowski K, Werth D, eds. Proceedings of the Modellierung betrieblicher Informationssysteme (MobIS 2008), Saarbruecken, Germany, Koellen:89\u2013105."},{"key":"9235_CR16","unstructured":"Frank, U., Heise, D., Kattenstroth, H., Ferguson, D., Hadar, E., & Waschke, M. (2009). ITML: A Domain-Specific Modeling Language for Supporting Business Driven IT Management. In Rossi M, Gray J, Sprinkle J, Tolvanen J-P, eds. Proceedings of the 9th Workshop on Domain-Specific Modeling (DSM) at the International Conference on Object Oriented Programming, Systems, Languages and Applications (OOPSLA), Orlando, Florida, USA."},{"issue":"5","key":"9235_CR17","doi-asserted-by":"crossref","first-page":"33","DOI":"10.1109\/2.589908","volume":"30","author":"A Gemmer","year":"1997","unstructured":"Gemmer, A. (1997). Risk Management: Moving Beyond Process. Computer, 30(5), 33\u201343.","journal-title":"Computer"},{"issue":"1","key":"9235_CR18","doi-asserted-by":"crossref","first-page":"16","DOI":"10.1016\/j.cose.2004.11.002","volume":"24","author":"M Gerber","year":"2005","unstructured":"Gerber, M., & Solms, R. v. (2005). Management of risk in the information age. Computers & Security, 24(1), 16\u201330.","journal-title":"Computers & Security"},{"issue":"6","key":"9235_CR19","doi-asserted-by":"crossref","first-page":"1043","DOI":"10.1111\/1539-6924.00272","volume":"22","author":"AJ Hatfield","year":"2002","unstructured":"Hatfield, A. J., & Hipel, K. W. (2002). Risk and Systems Theory. Risk Analysis, 22(6), 1043\u20131057.","journal-title":"Risk Analysis"},{"key":"9235_CR20","doi-asserted-by":"crossref","first-page":"333","DOI":"10.1057\/jit.1996.7","volume":"11","author":"FJ Heemstra","year":"1996","unstructured":"Heemstra, F. J., & Kusters, R. J. (1996). Dealing with risk: a practical approach. Journal of Information Technology, 11, 333\u2013346.","journal-title":"Journal of Information Technology"},{"key":"9235_CR21","unstructured":"Kirchner, L. (2005). Cost Oriented Modelling of IT-Landscapes: Generic Language Concepts of a Domain Specific Language. In Desel J, Frank U, eds. Proceedings of the Proceedings of the Workshop on Enterprise Modelling and Information Systems Architectures (EMISA 2005), 166\u2013179."},{"issue":"4","key":"9235_CR22","doi-asserted-by":"crossref","first-page":"71","DOI":"10.1201\/1078\/43193.17.4.20000901\/31256.12","volume":"17","author":"RL Kliem","year":"2000","unstructured":"Kliem, R. L. (2000). Risk Management for Business Process Reengineering Projects. Information Systems Management, 17(4), 71\u201373.","journal-title":"Information Systems Management"},{"issue":"6","key":"9235_CR23","doi-asserted-by":"crossref","first-page":"1071","DOI":"10.1111\/1539-6924.00274","volume":"22","author":"A Klinke","year":"2002","unstructured":"Klinke, A., & Renn, O. (2002). A New Approach to Risk Evaluation and Management: Risk-Based, Precaution-Based, and Discourse-Based Strategies. Risk Analysis, 22(6), 1071\u20131094.","journal-title":"Risk Analysis"},{"key":"9235_CR24","volume-title":"Enterprise Architecture at Work : Modelling, Communication and Analysis","author":"M Lankhorst","year":"2005","unstructured":"Lankhorst, M. (2005). Enterprise Architecture at Work: Modelling, Communication and Analysis. Berlin: Springer."},{"issue":"2","key":"9235_CR25","doi-asserted-by":"crossref","first-page":"173","DOI":"10.2307\/249574","volume":"16","author":"KD Loch","year":"1992","unstructured":"Loch, K. D., Carr, H. H., & Warketin, M. E. (1992). Threats to Information Systems: Today's Reality, Yesterday's Understanding. MIS Quarterly, 16(2), 173\u2013186.","journal-title":"MIS Quarterly"},{"key":"9235_CR26","unstructured":"Lu, R., Sadiq, S., & Governatori, G. (2008). Compliance Aware Business Process Design. In ter Hofstede AHM, Benatallah B, Paik H-Y, eds. Proceedings of the Business Process Management Workshops, Brisbane, Springer:120\u2013131."},{"key":"9235_CR27","doi-asserted-by":"crossref","unstructured":"March, J. G., & Shapira, Z. (1987). Managerial perspectives on risk and risk taking. Management Science, 33(11), 1404\u20131418.","DOI":"10.1287\/mnsc.33.11.1404"},{"issue":"5","key":"9235_CR28","doi-asserted-by":"crossref","first-page":"273","DOI":"10.1016\/0378-7206(94)90066-3","volume":"26","author":"RE McGaughey Jr","year":"1994","unstructured":"McGaughey, R. E., Jr., Synder, C. A., & Carr, H. H. (1994). Implementing information technology for competitive advantage: Risk management issue. Information & Management, 26(5), 273\u2013280.","journal-title":"Information & Management"},{"key":"9235_CR29","volume-title":"Applied risk analysis : Moving beyond uncertainty in business","author":"J Mun","year":"2004","unstructured":"Mun, J. (2004). Applied risk analysis: Moving beyond uncertainty in business. Hoboken: Wiley."},{"key":"9235_CR30","unstructured":"Neiger, D., Curilov, L., zur Muehlen, M., & Rosemann, M. (2006). Integrating Risks in Business Process Models with Value Focused Process Engineering Proceedings of the 2006 European Conference on Information Systems (ECIS 2006), Goteborg, Sweden, June 12\u201314, 2006."},{"key":"9235_CR31","first-page":"23","volume-title":"Advanced Object-Oriented Analysis and Design Using UML","author":"J Odell","year":"1998","unstructured":"Odell, J. (1998). Power Types. In J. Odell (Ed.), Advanced Object-Oriented Analysis and Design Using UML, (pp. 23\u201333). Cambridge: Cambridge University Press."},{"issue":"1","key":"9235_CR32","doi-asserted-by":"crossref","first-page":"129","DOI":"10.1080\/07421222.1991.11517914","volume":"8","author":"RK Rainer","year":"1991","unstructured":"Rainer, R. K., Synder, C. A., & Carr, H. H. (1991). Risk Analysis for Information Technology. Journal of Management Information Systems, 8(1), 129\u2013147.","journal-title":"Journal of Management Information Systems"},{"key":"9235_CR33","volume-title":"The Effective Measurement and Management of ICT Costs & Benefits","author":"D Remenyi","year":"2007","unstructured":"Remenyi, D., Bannister, F., & Money, A. (2007). The Effective Measurement and Management of ICT Costs & Benefits. Oxford: Elsevier."},{"key":"9235_CR34","volume-title":"Balancing Risk and Performance with an Integrated Finance Organization (The Global CFO Study 2008)","author":"S Rogers","year":"2008","unstructured":"Rogers, S., Lukens, S., Lin, S., & Jon, E. (2008). Balancing Risk and Performance with an Integrated Finance Organization (The Global CFO Study 2008). Somers: IBM Global Business Services."},{"key":"9235_CR35","unstructured":"Sadiq, S., Governatori, G., & Namiri, K. (2007). Modeling Control Objectives for Business Process Compliance. In Alonso G, Dadam P, Rosemann M, eds. Business Process Management, Springer:149\u2013164."},{"issue":"3","key":"9235_CR36","doi-asserted-by":"crossref","first-page":"185","DOI":"10.1057\/palgrave.jit.2000122","volume":"23","author":"H Salmela","year":"2008","unstructured":"Salmela, H. (2008). Analysing business losses caused by information systems risk: a business process analysis approach. Journal of Information Technology, 23(3), 185\u2013202.","journal-title":"Journal of Information Technology"},{"key":"9235_CR37","unstructured":"Sayer, P., & Wailgum, T. (2008). What You Can Learn about Risk Management from Soci\u00e9t\u00e9 G\u00e9n\u00e9rale. http:\/\/www.cio.com\/article\/336816\/What_You_Can_Learn_about_Risk_Management_from_Societe_Generale . Accessed Jan 21, 2009."},{"key":"9235_CR38","volume-title":"Functional Analysis of Office Requirements: A Multiperspective Approach","author":"G Schaefer","year":"1988","unstructured":"Schaefer, G. (1988). Functional Analysis of Office Requirements: A Multiperspective Approach. Chichester: Wiley."},{"key":"9235_CR39","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-642-97389-5","volume-title":"Architecture of Integrated Information Systems : Foundations of Enterprise Modelling","author":"A-W Scheer","year":"1992","unstructured":"Scheer, A.-W. (1992). Architecture of Integrated Information Systems: Foundations of Enterprise Modelling. Berlin: Springer."},{"key":"9235_CR40","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-642-58529-6","volume-title":"ARIS\u2014Business Process Frameworks","author":"A-W Scheer","year":"1999","unstructured":"Scheer, A.-W. (1999). ARIS\u2014Business Process Frameworks (3rd ed.). Berlin: Springer.","edition":"3"},{"key":"9235_CR41","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-642-57108-4","volume-title":"ARIS\u2014Business Process Modeling","author":"A-W Scheer","year":"2000","unstructured":"Scheer, A.-W. (2000). ARIS\u2014Business Process Modeling (3rd ed.). Berlin: Springer.","edition":"3"},{"key":"9235_CR42","unstructured":"Schelp, J., & Winter, R. (2006). Method Engineering: Lessons Learned from Reference Modeling. In Chatterjee S, Hevner A, eds. Proceedings of the First International Conference on Design Science Research in Information Systems and Technology (DESRIST'06), Claremont, CA, 555\u2013575."},{"key":"9235_CR43","unstructured":"Sienou, A., Lamine, E., Karduck, P. A., & Pingaud, H. (2007). Conceptual model of risk: towards a risk modeling language. In Weske M, Hacid M-S, Godart C, eds. Proceedings of the Web Information Systems Engineering\u2014WISE 2007 Workshop, Montpellier, France, June 17, 2008, Springer:118\u2013129."},{"key":"9235_CR44","unstructured":"Sienou, A., Lamine, E., & Pingaud, H. (2008). A Method for Integrated Management of Process-risk. In Sadiq S, Indulska M, zur Muehlen M, Franch X, Hunt E, Coletta R, eds. Proceedings of the 1st International Workshop on Governance, Risk and Compliance\u2014Applications in Information Systems (GRCIS'08) held in conjunction with the CAiSE'08 Conference, Montpellier, France, June 17, 2008."},{"issue":"6","key":"9235_CR45","doi-asserted-by":"crossref","first-page":"733","DOI":"10.1007\/s11135-005-3150-6","volume":"39","author":"P Verschuren","year":"2005","unstructured":"Verschuren, P., & Hartog, R. (2005). Evaluation in Design-Oriented Research. Quality & Quantity, 39(6), 733\u2013762.","journal-title":"Quality & Quantity"},{"issue":"4","key":"9235_CR46","doi-asserted-by":"crossref","first-page":"363","DOI":"10.1287\/isre.13.4.363.69","volume":"13","author":"Y Wand","year":"2002","unstructured":"Wand, Y., & Weber, R. (2002). Research Commentary: Information Systems and Conceptual Modeling-A Research Agenda. Information Systems Research, 13(4), 363\u2013376.","journal-title":"Information Systems Research"},{"issue":"4","key":"9235_CR47","doi-asserted-by":"crossref","first-page":"285","DOI":"10.1016\/0167-9236(94)00043-6","volume":"15","author":"Y Wand","year":"1995","unstructured":"Wand, Y., Monarchi, D. E., Parsons, J., & Woo, C. C. (1995). Theoretical foundations for conceptual modelling in information systems development. Decision Support Systems, 15(4), 285\u2013304.","journal-title":"Decision Support Systems"},{"issue":"2","key":"9235_CR48","doi-asserted-by":"crossref","first-page":"97","DOI":"10.1016\/S0263-7863(01)00080-1","volume":"21","author":"S Ward","year":"2003","unstructured":"Ward, S., & Chapman, C. (2003). Transforming project risk management into project uncertainty management. International Journal of Project Management, 21(2), 97\u2013105.","journal-title":"International Journal of Project Management"},{"key":"9235_CR49","unstructured":"Weill, P., & Ross, J. W. (2004). IT Governance: How Top Performers Manage IT Decision Rights for Superior Results. Harvard Business School Press"},{"key":"9235_CR50","volume-title":"IT Risk: Turning Business Threats into Competitive Advantage","author":"G Westerman","year":"2007","unstructured":"Westerman, G., & Hunter, R. (2007). IT Risk: Turning Business Threats into Competitive Advantage. Cambridge: Harvard Business School Press."},{"issue":"2","key":"9235_CR51","doi-asserted-by":"crossref","first-page":"127","DOI":"10.1057\/ejis.1994.13","volume":"3","author":"L Willcocks","year":"1994","unstructured":"Willcocks, L., & Margetts, H. (1994). Risk assessment and information systems. European Journal of Information Systems, 3(2), 127\u2013138.","journal-title":"European Journal of Information Systems"},{"key":"9235_CR52","unstructured":"zur Muehlen, M., & Rosemann, M. (2005). Integrating Risks in Business Process Models Proceedings of the 16th Australasian Conference on Information Systems (ACIS 2005), Sydney, 62\u201372."}],"container-title":["Information Systems Frontiers"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10796-010-9235-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10796-010-9235-3\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10796-010-9235-3","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,31]],"date-time":"2019-05-31T00:36:14Z","timestamp":1559262974000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10796-010-9235-3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,5,4]]},"references-count":52,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2011,9]]}},"alternative-id":["9235"],"URL":"https:\/\/doi.org\/10.1007\/s10796-010-9235-3","relation":{},"ISSN":["1387-3326","1572-9419"],"issn-type":[{"value":"1387-3326","type":"print"},{"value":"1572-9419","type":"electronic"}],"subject":[],"published":{"date-parts":[[2010,5,4]]}}}