| With the development of information technology,information support systems are gradually becoming an indispensable part of various companies,especially for a large number of Internet based technology companies,which are beginning to use the same architecture or model of information support system.These systems are vital for the production and operation of software products,but risk management still needs further improvement,some significant risks have emerged or are potentially hidden in the enterprise.Therefore,research on risk management based on information support system is essential.Development support system and office support system are two components of information support system.Development support systems include Confluence,Gitlab,Jira;office support systems include OA,ERP,CRM,human resource management platforms,mailbox system,portal system,etc.Firstly,based on the three major risk events that occurred in M Company in the past,the author analyzes the risk events using the fishbone diagram analysis method to obtain preliminary risk factors.Secondly,the author invited 6 IT experts from M Company to collect 74 risk items from M Company’s information support system with brainstorm method.After sorting out and summarizing the list,21 main risk factors were extracted,which were mainly classified as personnel risk,hardware risk,software risk,management/process risk,and environmental risk.On this basis,the author invited 10 IT experts to rate the risk consequences and probability of occurrence for 21 risk factors.The scoring results were qualitatively analyzed using a risk coordinate map and a risk matrix map.It was found that 80%of the risks were concentrated in medium to high risk areas,with a probability of occurrence.In addition,the author uses AHP to quantitatively analyze 21 risk factors,the first three most significant risks are management/process risk,personnel risk,and software risk.Regarding to different risks,the author proposes many effective solutions and monitoring advice.Such as apply the ITSM system,set up checks and balances-coordination-supervision and evaluation mechanisms among departments or personnel within the company or organization,and widely popularize risk awareness in the organization.Risk management plays an important role in improving efficiency and reducing losses in the operation of enterprises and organizations.The research results of this paper have reference significance for risk management of information support system of similar technology companies,and the solutions are expected to be applied to other peer enterprises. |
