Management by risks of automated information system quality

Quality risk management is a systematic process for the assessment, control, communication, and review of risks. It is an iterative process used throughout the entire computerized system life cycle from concept to retirement. Such a framework is most effectively implemented when it is incorporated into the overall QMS, and is fully integrated with the system life cycle. Risks that cannot be eliminated by design should be reduced to an acceptable level by controls or manual procedures. Risk reduction includes applying controls to lower the severity, decrease probability, or increase detectability. The aim is to present the methodology of risk management for improving the quality of automated information systems and presentation control strategy to reduce risks. Application of quality risk management enables effort to be focused on critical aspects of a computerized system, in a controlled and justified manner, leading to specific benefits The five step risk management process has been designed such that it may be scaled according to risk, complexity, and novelty of individual systems, with each step of the process building upon the previous output. Appropriate risk management processes should be followed throughout the life cycle in order to manage identified risks and to determine the rigor and extent of the activities required at each phase of the life cycle. The process of risk management can solve a problem of fuzzy identifying risks and potential variations in characteristics as automated information system and the problem of improper risk analysis based on multilevel models as stages of the life cycle of the system