Monitoring technology risks across extended enterprise operations: A case-study within the U.S. capital marke

Ensuring operational reliability of the technology based systems processing high volumes of financial related transactions for industries such as banking, insurance or capital markets is vital to the global economy. These systems no longer operate solely within a single enterprise, but are used to link operations across multiple organizations in order to move enormous volumes of asset related transactions from one entity to another on a real time or near real time basis. For each industry, the network of participants can be segmented into distinct supply chains or "extended enterprises" who are linked together via these systems to perform a specific set of functions. Within this context, monitoring operational IT risk levels across the various extended enterprises (EEs) making up these highly automated industries becomes particularly important.;This dissertation analyzes a particular EE within the US capital market in order to gain insight into how operational IT risk should be measured and monitored. The target industry (U.S. capital market) is segmented into multiple EEs based upon criteria introduced by the researcher. A rigorous case study approach is used to analyze one of these EEs (securities lending). The structure of the EE is defined by identifying the activities, organizations and systems involved with moving assets from the suppliers to the eventually end users. The operational IT risk metrics currently in use are examined along with the related industry oversight / governance protocols. The results of this case study are summarized and leveraged to inform improvements to the previously proposed methodology for monitoring operational IT risk levels for technology enabled EEs.