D4.4—Report on Risk, Benefit, Impact and Value

'Risk can be defined as the “effect of uncertainty on objectives”. With this in mind, and assuming that dealing with uncertainty is one of the important concerns of a digital curation stakeholder, the hypothesis that the body of knowledge on Risk Management can be valuable to the domain of digital curation sounds reasonable.

Risk Management involves establishing an appropriate infrastructure and organisational culture that allows for the application of a logical and systematic method of establishing the context; identifying; analysing; evaluating; treating; monitoring; and communicating risks associated with any activity, function, or process in a way that will enable organisations to minimize losses and maximise gains.'

Executive Summary

This deliverable of the 4C project work package “WP4—Enhancement” proposes a pragmatic method for estimating costs of digital curation in two different scenarios:

  1. A “Current” scenario, where the costs of controls already exist in the repository as a means to reduce the impact of the consequence of a risk/threat, change the likelihood of an event, or reduce the exposure to a vulnerability;
  2. A “Future” scenario, where the costs of controls do not yet exist, but where repository managers are able to consider alternative scenarios of repository governance.

The foundations of this method draw from relevant sources, such as the ISO31000 standard and the Business Model Canvas (BMC)1; the deliverable D4.1 where the Indirect Economic Determinants are described and analysed; the deliverableD4.5 where the BMC is presented; the deliverable D4.3 where literature sources regarding trustworthiness and control are described and analysed; and the deliverable D3.2, which describes the cost concept model and gateway specification.

The purpose of this method is to make good use of established risk management concepts to raise awareness of repository costs. The technique behind this method analyses the repository with the support of a risk registry and is based on:

  1. A risk analysis of the indirect economic determinants (from “D4.1—A Prioritised assessment of the indirect economic determinants of digital curation”), complemented by a specialised analysis using as reference the “D4.3—Quality and trustworthiness as economic determinants in digital curation”;
  2. A risk analysis of a BMC for digital curation (based on the results of task T4.5).

Examples of the method are presented in the form of two case studies.

This deliverable will be complemented in the future by the following extra mini-deliverables that will shape a toolset aiming to help guide the application of the method, namely:

  • A generic BMC, with an associated generic registry of risk questions—a registry of typical risk questions that are relevant for the domain of digital curation and can help to define a specific set of risk questions for a specific BMC;
  • A risk registry for digital curation—a registry of risks derived from the previous risk questions, and also common related controls, relevant for the domain of digital curation;
  • A set of case studies that detail the application of the method to real repositories.

These mini-deliverables will be draw upon several strands of the project—some that are yet to be completed—and will reuse results from all the other activities. As such, they will be developed independently and presented as appendices to be integrated in the Curation Costs Exchange (CCEx) platform.

D4.4—Report on Risk, Benefit, Impact and Value (2.64 MB)