Management Model-level Enterprise Information Risk Management

With increasing globalization and application of information technologies, informationalization is widely accepted and adopted in various fields of our society. Enterprise informationalization is no longer future trends but an inevitable route for further development. Large corporations need informationalization to raise profit, and small firms also need it to improve efficiency and therefore increase profit. Informationalization is the only way for enterprise of various sizes to develop in the future.Yet informationalization is not always a smooth journey, the results of which depend on the attitude of various enterprises. Hesitation or over investment in informationiztion usually leads to unwanted outcomes. The cause of the above phenomenon is deeply rooted in the various risks arising from the process of informationalization. Therefore prompt recognition and management of risks play a significant role in successful informationalization.Existing researches on enterprise infomationization, conducted by both overseas and domestic experts, have gone to two extremes. One side focus on infomationization risk management of a certain type of enterprises, while the other focus on theoretical studies without practical application. Thus there are few risk management studies on informationizaiton of enterprises at a certain stage. This thesis is based on theoretical studies on EICMM, which classifies enterprises into five grades according to their information maturity. This thesis is dedicated to risk management studies of third grade enterprises in the hope pf providing a universal guideline to infomationization of these enterprises. It first identifies possible risks arising from the process of informationiztion and evaluate them via Risk Metrics (based on Borda) and AHP, and provide corresponding solutions.