The validity and reliability of the study is based on the focus group assessment of the mappings.
📌 3 Maddede Bu Makale
🎯
Amaç & Hipotez:This study addresses the issue of the Information Technology (IT) Governance frameworks and standards that respond to different levels of operational risks, especiallythose caused by the information systems and technology infrastructure.
📊
Temel Bulgular & Veri:A requirement analysis regarding Basel II is conducted, a gap analysis between the InformationControl Models (ICMs) is performed, and the aggregated IT checklist for Operational Risk Management (ORM) is proposed by mapping the control objectives in ICMs tothe operational risk categories described in Basel II as loss event types.
💡
Sonuç & Katkı:The validity and reliability of the study is based on the focus group assessment of the mappings.
🔬Tür:Modelleme & Sayısal Simülasyon
📍Kapsam:Genişletilmiş Akademik Örneklem
⚙️Değişkenler:Basel II · Operational Risk Management · Information Control Model
Abstract
This study addresses the issue of the Information Technology (IT) Governance frameworks and standards that respond to different levels of operational risks, especiallythose caused by the information systems and technology infrastructure. A requirement analysis regarding Basel II is conducted, a gap analysis between the InformationControl Models (ICMs) is performed, and the aggregated IT checklist for Operational Risk Management (ORM) is proposed by mapping the control objectives in ICMs tothe operational risk categories described in Basel II as loss event types. The validity and reliability of the study is based on the focus group assessment of the mappings.
ÖNAL, M. Z. (2007). Operasyonel Risk Yönetimi için Bütünleştirilmiş Bilgi Teknolojileri Kontrol Listesi. BDDK Bankacılık ve Finansal Piyasalar Dergisi, Cilt: 1 - Sayı: 2, 49–75. https://ajindex.com/articles/473887
Basel Committee. (2002c). About the Bank for International Settlements, Basel Committee on Banking Supervision. Basel: The Bank for International Settlements. Basel Committee. (2003a). Sound practices for the management and supervisi- on of operational risk. Basel: The Bank for International Settlements. Basel Committee. (2003b). The New Basel Capital Accord consultative docu- ment. Basel: The Bank for International Settlements. Basel Committee. (2004). International convergence of capital measurement and capital standards: A Revised Framework. Basel: The Bank for International Settlements. BBA, ISDA, RMA ve PwC. (1999). Operational risk: the next frontier. Philadelp- hia: British Bankers’ Association, the International Swaps and Derivatives Asso- ciation, Risk Management Association, and PricewaterhouseCoopers. Bornman, W. G. ve Labuschagne, L. (2006). A comparative framework for eva- luating information security risk management methods. Auckland Park: Rand Afrikaans University. BRSA. (2001). Regulation on banks’ internal control and risk management sys- tems –Banking Regulation and Supervision Agency. Turkish Official Gazette, 8 February 2001, 24312. BRSA. (2006a). An attitude of Banking Regulation and Supervision Agency for IT assurance. Istanbul: IT Audit 2006 Workshops Proceedings. BRSA. (2006b). Regulation on information systems assurance in the banks - Banking Regulation and Supervision Agency. Turkish Official Gazette, 16 May 2006, 26170. BSI. (1999). British Standard: Information security management part1 & part2. London: British Standards Institute Group (BSI). Campbell, P. L. (2003). An introduction to information control models. New Mexico: Sandia National Laboratories. Carey, M. ve Stulz, R. M. (2005). The risks of financial institutions. Columbus: Ohio State University Press.
Chapelle, A. (2005b). The virtues of operational risk management. Brussels: Université Libre de Bruxelles. COSO. (2004). Enterprise Risk Management – Integrated Framework. Washing- ton: The Committee of Sponsoring Organizations of the Treadway Commission (COSO). Datardina, M. (2005). Comparative analysis of IT control frameworks in the context of SOX. Ontario:Centre for Information Systems Assurance, University of Waterloo. Davidson, S. (2006). The role of identity management: Moving from complian- ce to improved business performance. New York: Computer Associates Inter- national, Inc. Di Renzo, B. ve Bernard, C. (2005). Operational risk management in financial instituti