A Study On The Risk Management Of Information System

As a rising project engineering in recent years, Information System (IS) program growing with new technology and knowledge, has great uncertainty and often faces varieties of risks, which makes it hard to achieve the project goal. Therefore, risk management plays a very important role in completing information system project. According to the basic theory of risk management, this paper, taking X bank flat network information system and Y soft company as an example, discusses how to carry out risk management effectively in information system, and summarizes its advantages and deficiencies, and finally puts forward some suggestions for the future development of information project risk management.This thesis can be divided into the following parts:first of all, it discusses the significance of this study and summarizes the research status of information system project risk management both at home and abroad, and then puts forward the research purpose. Secondly, it identifies the basic concept and theory of information system project and its risk management, in which risk management consist of risk management planning, risk identification, risk analysis, risk control and other activities. Thirdly, it introduces the background and needs of X bank flat network information system program. Fourthly, it introduces in detail the procedure of risk management in X bank flat network information system program, combining with the basic theory of risk management of information system project. This study attaches great importance to the risk controlling, such as communication risk, human resource risk and cost risk, etc. for which each type of risk is summed up a series of effective measures. In addition, it summarizes the shortcomings of risk management of bank X flat network information system program, and then offers the reasons for the program’s delaying. Finally, it points out the improvements in information system project, on the basis of experience and lessons from X bank flat network project. Conclusions of the study are as follows:(1) It is necessary to make full use of the existing theoretical knowledge of risk management to promote the risk management of information system project;(2) It is essential to enhance personal risk consciousness and build risk culture in enterprise;(3) Accumulating experience in risk management and improving the risk management database;(4) training people who is major in risk management.After a case study on information system project, some ideas and views have been summed up. It is hoped that this paper will contribute to the theoretical knowledge in information system project’s risk management, simultaneously promote the in-depth study of risk management of information system project in practice.