Study On The Risk Identification And Assessment Of Banking Information System Outsourcing

With the rapid development of modern financial business,Banks are increasingly dependent on Information Systems(IS,for short)to provide services and Information processing.IS widely used in the banking industry greatly improved the efficiency and service quality.However,it also brought many kinds of related risks.Risk management of IS outsourcing is more and more crucial for banks.Futhermore,the risk identification and risk assessment is the key link and the cornerstone in the risk management system.Therefore,combining with the actual,through the in-depth study of risk identification and assessment of IS outsourcing in bank,this paper want to provide the beneficial references for bank staff in the face of IS outsourcing risk managenment.First of all,based on the existing related literature,this paper definded the basic concepts of IS outsourcing of bank and tis risk management,and bulid the theoretical basis of this paper.Then this paper focus on theoretical discussion of risk indentification and risk assessment from the source of risk,risk events,risk measurement,risk ranking etc.,and then established the analytical paradigm of risk identification and risk assessment with the core of risk martix.Furthermore,this paper take IS outsourcing of Y BANK as a case,and systemicly analyzed the risk identification and assessment,based on the questionnaire survey and Borda mathod,and than put forward some corresponding advices about risk management.The study in this paper suggested many problems about IS outsourcing in Y BANK should be pay more attention,such as immature internal risk control system,lack of completeness and systematicness of risk assessment,the distortion of assessment contents,absence of risk supervision etc.What's more,this paper concluded 18 possible risk events of Y BANK in three areas,outsourcing procurement,outsourcing contracts and outsourcing cooperation.Furthermore,according to the value calculation by Borda method,the risk of outsourcing provider selection and the risk of system operation and maintenance are the most important risk events.On the contrary,the risk of policy and the risk of outsourcing provider change are least important.