SavedAdd your journal

Journals / BDDK Bankacılık ve Finansal Piyasalar Dergisi / 2007 / Cilt: 1 - Sayı: 2

Operasyonel Risk Yönetimi İçin Bütünleştirilmiş Bilgi Teknolojileri Kontrol Listesi

An Aggregated Information Technology Checklist for Operational Risk Management

Mehmet Zeki ÖNAL
Pages
49–75
DOI
—
🏛️Bibliographic metadata and full text access for this article are provided via DergiPark.
DergiPark Record ↗
✨

AI Summary & Key Takeaways

AI Insight
⚡ TL;DR(Too Long; Didn't Read)

The validity and reliability of the study is based on the focus group assessment of the mappings.

📌 3 Key Takeaways

🎯
Objective & Hypothesis:This study addresses the issue of the Information Technology (IT) Governance frameworks and standards that respond to different levels of operational risks, especially those caused by the information systems and technology infrastructure.
📊
Key Findings & Data:A requirement analysis regarding Basel II is conducted, a gap analysis between the Information Control Models (ICMs) is performed, and the aggregated IT checklist for Operational Risk Management (ORM) is proposed by mapping the control objectives in ICMs to the operational risk categories described in Basel II as loss event types.
💡
Conclusion & Impact:The validity and reliability of the study is based on the focus group assessment of the mappings.
🔬Design:Modeling & Simulation
📍Scope:Comprehensive Sample
⚙️Variables:Domain Parameters

Abstract

This study addresses the issue of the Information Technology (IT) Governance frameworks and standards that respond to different levels of operational risks, especially those caused by the information systems and technology infrastructure. A requirement analysis regarding Basel II is conducted, a gap analysis between the Information Control Models (ICMs) is performed, and the aggregated IT checklist for Operational Risk Management (ORM) is proposed by mapping the control objectives in ICMs to the operational risk categories described in Basel II as loss event types. The validity and reliability of the study is based on the focus group assessment of the mappings.

Özet

Bu çalışma, Bilgi Teknolojileri (BT) Yönetişim çerçevesi ve standartlarının, özellikle bilgi sistemleri ve teknolojileri altyapısından kaynaklanan farklı seviyelerdeki operasyonel risklere cevap vermeleri sorununu vurgulamaktadır. Basel II bağlamında bir gereksinim analizi yapılmış, Bilgi Kontrol Modelleri (BKM) arasında bir farklılık analizi gerçekleştirilmiş ve Basel II’de zarar olay tipleri olarak açıklanan operasyonel risk kategorilerinin BKM’lerdeki kontrol hedeflerine eşleştirilmesi ile Operasyonel Risk Yönetimi (ORY) için bütünleştirilmiş BT kontrol listesi önerilmiştir. Çalışmanın geçerliliği ve güvenilirliği, eşleştirmeler üzerinde yapılmış olan grup değerlendirmesine dayandırılmıştır.

🔖

Cite This Article

ÖNAL, M. Z. (2007). Operasyonel Risk Yönetimi İçin Bütünleştirilmiş Bilgi Teknolojileri Kontrol Listesi. BDDK Bankacılık ve Finansal Piyasalar Dergisi, Cilt: 1 - Sayı: 2, 49–75. https://ajindex.com/articles/148565

📄 Full Text PDF Viewer

📄

PDF görüntüleyici hazırlanıyor...

References (17)

  1. Alberts, C. (2006). Common elements of risk. Pittsburgh: Software Engineering Institute, Carnegie Mellon University
  2. Alberts, C. ve Dorofee, A. (2005). Mission assurance analysis protocol (MAAP): Assessing risk in complex environments. Pittsburgh: Software Engineering Institute,Carnegie Mellon University
  3. Beaumaster, S. (2002). Local government IT implementation issues: a challenge for public administration. Hawaii: Proceedings of Hawaii International Conference on System Sciences
  4. Basel Committee. (2001a). The new Basel Capital Accord: an explanatory note. Basel: The Bank for International Settlements
  5. Basel Committee. (2001b). Consultative document: operational risk. Basel: The Bank for International Settlements
  6. Basel Committee. (2001c). Working paper on the regulatory treatment of operational risk. Basel: The Bank for International Settlements
  7. Basel Committee. (2001d). Sound practices for the management and supervision of operational risk. Basel: The Bank for International Settlements
  8. Basel Committee. (2002a). Sound practices for the management and supervision of operational risk. Basel: The Bank for International Settlements
  9. Basel Committee. (2002b). Overview paper for impact study. Basel: The Bank for International Settlements
  10. Basel Committee. (2002c). About the Bank for International Settlements, Basel Committee on Banking Supervision. Basel: The Bank for International Settlements
  11. Basel Committee. (2003a). Sound practices for the management and supervision of operational risk. Basel: The Bank for International Settlements
  12. Basel Committee. (2003b). The New Basel Capital Accord consultative document. Basel: The Bank for International Settlements
  13. Basel Committee. (2004). International convergence of capital measurement and capital standards: A Revised Framework. Basel: The Bank for International Settlements
  14. BBA, ISDA, RMA ve PwC. (1999). Operational risk: the next frontier. Philadelphia: British Bankers’ Association, the International Swaps and Derivatives Association, Risk Management Association, and PricewaterhouseCoopers
  15. Bornman, W. G. ve Labuschagne, L. (2006). A comparative framework for evaluating information security risk management methods. Auckland Park: Rand Afrikaans University
  16. BRSA. (2001). Regulation on banks’ internal control and risk management systems – Banking Regulation and Supervision Agency. Turkish Official Gazette, 8 February 2001, 24312
  17. BRSA. (2006a). An attitu