A Framework for Assessing Technology Risks in Transaction-Based Extended Enterprises: U.S. Capital Market Case

Ensuring operational reliability of the technology-based systems processing transactions for industries such as the U.S. capital market is vital to the global economy. Within this context, monitoring operational IT risk levels (a component of enterprise risk management) across the various supply chains or "extended enterprises" (EEs) making up these highly automated sectors becomes particularly important. This paper proposes an approach for segmentation of complex industries such as the U.S. capital markets into EEs and assessing their IT operational risk level. The concept of EE technology risk index is introduced and modified with the use of fault tree analysis to help oversight groups monitoring technology risks for this type of industry. The proposed methodology is illustrated with one of the EEs within the U.S. capital market. Observations on the approach and potential future research is discussed.