企业信息化风险的识别与评估  

Identification and Assessment of the Risk of the Enterprise Informatization

作　　者：闫华红[1] 董旭[1] 

机构地区：[1]首都经济贸易大学会计学院,北京100070

出　　处：《中国科技论坛》2013年第6期70-74,80,共6页Forum on Science and Technology in China

基　　金：教育部人文社会科学研究项目"基于高新技术企业信息化风险的人机治理模式研究"(11YJA630120);北京市财政和北京市教委人才培养项目;北京市教委科研水平提高项目资助

摘　　要：本文按照企业信息化实践应用中发现的风险点,将企业信息化风险分为信息系统风险、控制人员风险和信息战略风险三大类,并在此基础上运用层次分析法和德尔菲法将企业信息化风险进行逐步分解,总结出风险的具体影响因素,计算各影响因素的分数和相对总风险的权重,构建企业信息化风险评估模型,从而为企业对自身信息化风险进行动态监测提供借鉴。In this article, the risk points, which are founded in the practical applications of the enterprise informatization, divide en- terprise informatization risk into three categories： information system risk, control personnel risks and information strategic risks. Through the analytic hierarchy process and Delphi method, the risk of enterprise informatization is decomposed progressively. And then the specific impact of the risk factors is summed up, the scores for each factor and weight relative to the total risk is calculated, and the informatization risk assessment model of enterprise has been built. Thereby the model can provide a reference for the dynamic monitoring of the enterprise＇s own informatization technology risk.

关 键 词：信息化风险 层次分析法 德尔菲法 动态监测模型 

分 类 号：F062.5[经济管理—政治经济学]