Integration and cohesion of operations and information technology risk assessments for China Banking Corporation

• Main Author: Dela Torre, Jinky T.
• Format: text
• Language: English
• Published: Animo Repository 2018
• Subjects: Risk assessment; Technology—Risk assessment; Banks and banking; Business Administration, Management, and Operations
• Online Access: https://animorepository.dlsu.edu.ph/etd_masteral/6698; https://animorepository.dlsu.edu.ph/context/etd_masteral/article/13624/viewcontent/Dela_Torre__Jinky_T.2__IAR_Paper_Final_Jinky_Dela_Torre.pdf
• Institution: De La Salle University

Operations (Ops) and IT Risk of China Banking Corporation decided to focus on improving the current design of risk assessment templates and automating the assessment process as well. The action research’s focal issue is the need for the integration and cohesion of Ops and IT Risk assessments. Objective is to streamline the process, create a meaningful and useful data flow, and facilitate risk aggregation to be used as an input for senior management decision. Through action research, our group worked collaboratively on ideas and action points, went through the process guided by a structure, and strived to achieve the scope agreed upon. The action research project resulted to well-designed templates, capable of handling data integration between Ops and IT Risk. And we were also able to finish the prototype screens for the automated system. Using the concepts and framework that I selected to guide us in this internal action research, we learned that it is possible to implement projects in a collaborative manner where each member’s voice is being heard, ideas are considered, and those ideas feed on another until a specific idea is agreed on. Another learning is that, it is not only accurate but it’s also beneficial for project initiators like me not to label team members in either of the two ends of personality types. People are situated in a continuum and they may move from one location to another depending on several factors such as the environment, motivation, and the skill of the facilitator. Moreover, for risk assessments, we learned that it is possible for us to work on improving the capability level of Ops and IT Risk thus, contributing in value creation not only for China Bank but also for the Banking industry and the Risk Management practice. It is therefore recommended that the outcome of this action research be shared to the industry and to the practice itself, for wider adoption and continual improvement.