A RISK MANAGEMENT MODEL FOR SERVICE-ORIENTED ARCHITECTURE: AN APPLICATION IN THE IMPLEMENTATION OF SOA SERVICES

摘要

The risk may be approached through two perspectives; a threat that, should it happen, will cause a negative effect on at least one project objective; and an opportunity, when it causes a positive effect on the project. Managing risks aims to increase the likelihood and impact of positive events and decrease the likelihood and impact of adverse events. In this article, an IT risk management model for service-oriented architecture is presented, formed from the use of the NIST 800-30, FAIR and OCTAVE Allegro. With this model is expected to ensure that any failure in the implementation of service-oriented architecture does not endanger the strategic objectives of the corporation. It is important to consider a related risk to operations - failures and security vulnerabilities or even design and development - may have an impact on the success of the corporation in a campaign or specific initiative or in your image. To demonstrate its use, an application is shown, so the main ideas and contributions of a model of IT risk management will applied in the implementation of service-oriented architecture.