ArticlePDF Available

Bigdata Analytics for Enterprise Risk Management: A Review

Authors:

Abstract

Bigdata analytics integration in Enterprise Risk Management (ERM) features of the modern and transformative impact and risk assessment models. The advent of Big Data and advanced analytics has revolutionized the organizational identification, assessment, and risk mitigation model, hence the revolution from static approaches to dynamic and data-driven models. This research paper examines the theoretical frameworks such as Risk Analytics Frameworks, Data-driven Decision-Making models, and Cybersecurity Risk models essential in enhancing the leverage of enhanced risk assessment. The research findings depict data integration as the fundamental concept in risk identification, predictive capabilities, and dynamic risk management alongside the multi-dimensional perspective on risk factors. The study concludes with the illustration of integrating Big Data analytics as fundamental in modern risk management practices, empowering the organizations' approaches to addressing emerging threats. The approaches enhance decision-making, resource allocation, and organizational resilience. Hence, the research has expounded on the significance of adaptive data-driven approaches in manoeuvring the complex business world.
1
Bigdata Analytics for Enterprise Risk Management: A Review
Rativardhan Sengar
University of Central Missouri, Warrensburg, MO, USA
Pratheep Paranthaman
Elon University, Elon, NC, USA
May 2021
Abstract:
Bigdata analytics integration in Enterprise Risk Management (ERM) features of the modern and
transformative impact and risk assessment models. The advent of Big Data and advanced analytics has
revolutionized the organizational identification, assessment, and risk mitigation model, hence the revolution
from static approaches to dynamic and data-driven models. This research paper examines the theoretical
frameworks such as Risk Analytics Frameworks, Data-driven Decision-Making models, and Cybersecurity
Risk models essential in enhancing the leverage of enhanced risk assessment. The research findings depict
data integration as the fundamental concept in risk identification, predictive capabilities, and dynamic risk
management alongside the multi-dimensional perspective on risk factors. The study concludes with the
illustration of integrating Big Data analytics as fundamental in modern risk management practices,
empowering the organizations' approaches to addressing emerging threats. The approaches enhance decision-
making, resource allocation, and organizational resilience. Hence, the research has expounded on the
significance of adaptive data-driven approaches in manoeuvring the complex business world.
Keywords:
Big Data Analytics, ERM, Risk Assessment, Data-driven Decision Making, Risk Mitigation.
I. Introduction
Enterprise Risk Management (ERM) forms a fundamental component of the organizational
strategy as it incorporates identifying, assessing, and mitigating the risks that are likely to affect
the success and achievement of the business objectives. Over the recent past, technological
advancement has culminated in the advent of Big Data alongside advanced analytics, which
has presented new avenues for the organization enhancement in risk management essential for
organizations in enhancing their risk management models (Gatzert & Schmit, 2016). The
business world has revolutionized with emerging modern markets; hence, businesses struggle
with market fluctuations, cybersecurity breaches, and the ultimate need for integrating big
analytics and enterprise risk management as transformative tools. The ultimate shift serves as
poignant of the ultimate drift from the traditional and static approaches to the modern and data-
driven approaches. Big data forms the fundamental tool, incorporating the immense data
pooling and the comprehensive real-time analytics essential for business operations (Machorro-
Cano et al., 2020). The integration forms the ultimate tool in identifying the potential risks in
the business operations, alongside the enhanced prediction and proactive mitigation with a
correspondent resilience and reliability. An extensive analysis of the Big Data analytics within
the ERM examines the theoretical frameworks that underline the integration and the challenges
alongside the possible solutions to challenges and navigation of the complex hurdles within the
dynamic and evolving business landscape, especially in risk management.
Research Objectives
Based on the business landscape and technological advancement, this research objectives
include;
2
a. Examine the theoretical framework of incorporating Big Data analytics within
Enterprise Risk Management (ERM).
b. Investigate the essential models for enhancing the data collection, processing, and
analysis for effective risk management.
c. Assess the outcomes and implications of incorporating the Big Data analytics within
the ERM.
II. Literature Review
Big Data and It’s Relevance to ERM.
Modern business operations have transitioned to data-driven decision-making, including "Big
Data" as a representative of the immense datasets with complex, extensive, and high-generation
velocities as their definitive characteristics (Dash et al., 2019). The datasets have transitioned
to overpass the traditional data processing tools' capabilities (De Broe et al., 2019). "Big Data"
has fallen under three categories: Volume, Velocity, and Variety. The ERM context is
significant in three particular capabilities in revolutionizing risk assessment models and
mitigation strategies (see Figure 1). The traditional models entailed the ERM overlying on
structured data sources such as financial reports and historical performance data, which often
have remained limited to capturing emerging and non-linear risks (De Broe et al., 2019). The
Bigdata comprises unstructured and variant data sources such as social media interactions,
customer feedback, market sentiment, sensor data, and comprehensive and real-time data
provisions. Technological advancement has revolutionized the data industry by incorporating
the various theoretical models that guide the integration of Big Data into ERM. These
frameworks have enhanced the capabilities of harnessing the data analytics power (Giannakis
& Louis, 2016).
Figure 1. Usableness of Bigdata in ERM
Risk Analytics Framework.
This approach seeks to leverage the Big Data capabilities and advanced analytics within
incorporation to enterprise risk management, enhancing the risk assessment models. The model
posits the business transition from traditional statics models to real-time and data-driven
approaches (Araz et al., 2020). The Risk Analytics framework has revolutionized data analysis
by emphasizing new models such as machine learning algorithms. These new approaches have
3
culminated in enhancing the business processes and analysing the extensive data volumes
extending beyond conventional data processing. Incorporating machine learning algorithms
has influenced the identification of intricate patterns alongside the data correlations,
consequently identifying new insights and likely insights.
The Risk Analytics framework provides a new model for data analysis and risk assessment,
emphasizing real-time risk assessment (see Figure 2). This model downgrades the traditional
approaches through continuous data collection and analysis, unlike traditional ones, which
depend on periodic assessment. The approach presents various advantages in risk assessment
as it facilitates prompt detection and response to ever-emerging risks and provides efficient
data vigilance and real-world operations (Ivanov et al., 2018). This approach assures enhanced
decisions and proactive mitigation of potential threats.
The new Risk Analytics Framework has acknowledged the modern-day technologies that have
taken the shape of the dynamics and static risk assessment models, making some easily
obsolete. The real-time approaches suit the modern market, whose technologies and regulations
require swift organizational adaptations (Yang et al., 2020). The approach, therefore,
emphasizes the utilization of historical data and fixed models as likely to culminate in myopic
risk comprehensions with a likelihood of exposure to unforeseen challenges.
Figure 2. Risk Analytics Framework
Data-Driven Decision-Making Model.
A data-driven approach in business enterprise risk management forms the ultimate model
featuring new industries and their corresponding approach to risk management. The theoretical
framework emphasizes the systematic approach, which demands overreliance on data evidence
for decision-making. This data analysis model anchors risk management decisions with
empirical data-driven analysis, enhancing comprehensive data insights (Lu et al., 2019). Hence,
this approach enhances the organizations in making informed and proactive decisions on risk
assessments and management.
The key approaches in Data-Driven Decision-Making entail continuous data collection and
analysis. The model correlates to the Risk Analytical Framework emphasizing real-time data
analysis. The organization has revolutionized to easily respond to emerging risks and adapt to
risk management strategies (Visvizi et al., 2021). Besides, the organization recognizes the
datadriven approaches with unprecedented access to large data volumes and variety, hence
providing extensive insights on the risks and opportunities. Hence, the approaches enhance the
4
interdependence of the factors contributing to the risk profiles (Lu et al., 2019). The data-driven
Decision-Making Model (see Figure 3) nurtures the proactive approach in risk management
through the leveraging of data-driven insights for the identification of the likely risks before
escalation, hence implementing the preventive measures. The approach downgrades the
capability of negative outcomes, positioning organizations on the approaches essential to
capitalize on emerging opportunities.
Figure 3. Data-driven decision-making process in ERM
Cybersecurity Risk Model.
Modern society has witnessed a revolution in cyber risk, which threatens the organizational
landscape in the era of the digital age. The Cyber Security Model features the strategic
utilization of Big Data and advanced analytics, emphasizing the organization's security posture.
The model has emphasized the cyber risk, which entails the collection and the vast data analysis
with the utilization of immense data sources to help unmask the hidden anomalies that cause
potential security breaches (Wang et al., 2020). The advanced analytics featured in this model
incorporate sophisticated algorithms, machine learning techniques, and artificial intelligence
essential for data sifting and identifying the irregularities that signal the various cyber threats.
The approaches further meanders through adaptive, responsive mode to emerging cyber risks.
The cybersecurity Risk Model seeks to unravel modernized cyber threats by rapidly deploying
models combating evolving cyber adversaries. Incorporating Big Data and advanced analytics
provides insights against evolving cyber threats. The model also signifies the need to initiate
timely detection and responses to the threats to cyber threats (Shin & Lowry, 2020). The
leveraging of Big Data and advanced analytics has facilitated organizations in detecting and
responding to cyber threats in real-time, significantly reducing the likely damages accrued to
the risk breach.
III. Methodology
This research paper incorporates a multidisciplinary approach comprising various domains to
address the complex challenges inherent in modern risk assessment and mitigation, especially
in Big Data analytics. The major components within the multifaceted framework include
machine learning algorithms, data-driven decision-making processes, and predictive analytics.
These methodologies guide the development of robust predictive models in data forecasting,
resource allocation, and inventory management alongside routine optimization in the context
of risk management. The research framework also incorporates data science principles in
guiding the research data collection, processing, and analysis using the various risk
assessments. The approach includes the incorporation of historical, real-time, and IoT essential
for Big Data analytics. The incorporation of logistics constitutes the third guiding framework
5
comprising supply chain management, inventory control, and last-mile optimization. The
logistical principles integration assures the streamlining of the goods and information pertinent
to the risk assessment within the enterprise assessment. The sustainability approach includes
introducing principles to reduce excess energy consumption and emission during production
by incorporating sustainable practices to mitigate environmental risks and contribute to a
resilient enterprise ecosystem.
Data Collection, Processing and Analysis
This research incorporates a systematic approach to expand the data collection from vast
sources on enterprise risk management and integration within Big Data analytics. For instance,
the research incorporated traditional sources of data collection comprising financial reports to
enhance the comprehension of the historical performance and financial risks, market research
from market studies and industry reports to assess trends, customer behaviour, and competitive
landscapes alongside the surveys and questionnaires issued to stakeholders, experts, and risk
management practitioners. Further, the research incorporated data collection from big data
sources such as social media for public sentiment, consumer feedback, and emerging trends
assessment. The incorporation of the Internet of Things (IoT) included the interconnection of
the system, hence gathering real-time across various operational practices.
Data Processing and Analysis
The data analysis for this research study incorporated the various aspects that helped provide
insights into big data analytics for enterprise risk assessment. The descriptive analytics
included summarizing and exploring the data to provide insights into the various patterns,
distributions, and key characteristics. The incorporation of predictive analytics included
utilizing machine learning algorithms in nurturing the models essential for predicting future
risks according to historical and real-time data using regression, classification, and time series
analysis. The prescriptive analytics incorporated the specific risk mitigation strategies
according to analytical insights such as incorporation of simulations and techniques
optimization.
IV. Results and Discussion
Regarding the three research objectives, the Big Data analytics integration in Enterprise Risk
Management (ERM) provided the organizations with profound insights and transformative
capabilities.
Enhanced Risk Identification and Assessment.
Incorporating Big Data analytics has systematically helped enhance risk identification and
assessment. The approach includes utilizing diverse data sources such as social media
interactions, customer feedback, and market sentiment, enhancing the likely risk identification.
This approach proved a viable proactive approach in addressing the emerging threats often
overlooked by traditional approaches.
This is especially crucial in cases where specific regulatory risks related to data privacy have
been imposed by regulatory requirements like the US Privacy Act and the General Data
Protection Regulation (GDPR). Therefore, another issue that businesses must deal with is how
to apply Big Data Science without compromising customer privacy. For instance, one might
use big data analytics to examine an individual's political preferences, purchasing patterns, and
other personal information through posts or content that is posted online (Saltz & Lahiri, 2020).
6
Figure 4. Risks Assessment
Predictive Capabilities.
The advanced analytics techniques exemplified by machine learning have provided the ultimate
approach to predicting future risks. This approach leverages historical and real-time data to
develop accurate models to anticipate potential threats (Wang et al., 2018). This approach
enhances the implementation of the pre-emptive measures essential to reducing the likelihood
of adverse outcomes.
Dynamic Risk Management.
As influenced by Big Data analytics, continuous data monitoring sought to enhance the
institution of dynamic approaches in risk management. The organizations incorporate the
adaptation to real-time strategies to enhance the response to emerging risks, hence the enhanced
risk management practices relevant to evolving business environments (Choi et al., 2017).
Multi-dimensional Risk Perspective.
Incorporating the traditional ERM and Big Data sources (see Figure 5) forms a foundation for
enhancing the multi-dimensional perspectives of the risk landscape (Sharma & Dash, 2020).
The comprehensive view includes the analysis of risk factors and impacts on business
objectives, hence a holistic approach to risk assessment and mitigation (Al-Zobbi et al., 2017).
Figure 5. Essential Elements of ERM controlled through Bigdata Analytics
7
The research findings have indicated that integrating Big Data analytics is fundamental in
enhancing risk management practices. This approach includes harnessing the Big Data
potential, which supports organizations in overcoming the traditional models essential in
enhancing the proactive and data-driven approaches. This shift correlates to the modernized
and evolving landscape with diverse, dynamic, and unpredictable risks (Choi et al., 2017).
Machine learning has consequently influenced predictive capabilities through accurate risk
forecasts; hence, effective mitigation models are essential for enhancing organizational
resilience and improving decision-making processes.
Continuous data monitoring using real-time approaches helps in enhancing risk management.
The approach supports the swift response to emerging threats, mitigating the likely damages
and enhancing business continuity. The multi-dimensional risk perspectives accrued from the
diverse data sources integration provide the comprehension of the complex risk factors
integration (Wang et al., 2016). The holistic approach enhances the organizations' operation in
initiating informed and strategic decisions within risk management.
V. Conclusion and Recommendations
Integrating Big Data Analytics within Enterprise Risk Management (ERM) features the
advancement in risk assessment and mitigation models. The approach seeks to enhance the
proactive identification, assessment, and mitigation of risks, supporting their resilience and
adaptability to ever-evolving business landscapes. Incorporating vast data sources such as
social media interactions and customer engagements is fundamental in enhancing the
mitigation efforts against the emerging threats often overlooked in traditional approaches. The
predictive capabilities facilitated by machine learning enhance the organizational capabilities
in anticipating and mitigating future risks, optimizing resource allocation, and decision-
making. Risk management facilitates dynamic risk management by swiftly responding to
emerging threats and minimizing the likely damages. Blending traditional and Big Data sources
offers a multi-dimensional perspective on comprehending the various risk factors' interaction
and impact on business objectiveness.
Big data analytics for risk management will inevitably make it possible for enterprises to
employ increasingly sophisticated fraud detection methods. In order to identify suspicious
patterns, trends, and anomalies, it enables precise analysis of transactional, social media, and
geolocation data, consumer behaviour, and other relevant information. Future research will
examine how big data analytics and AI are being used to transform the digital environment of
contemporary ERM procedures and methods.
References
Al-Zobbi, M., Shahrestani, S., & Ruan, C. (2017). Improving mapreduce privacy by
implementing multi-dimensional sensitivity-based anonymization. Journal of Big
Data, 4(1). https://doi.org/10.1186/s40537-017-0104-5
Araz, O. M., Choi, T., Olson, D. L., & Salman, F. S. (2020). Role of analytics for operational
risk management in the ERA of Big Data. Decision Sciences, 51(6), 13201346.
https://doi.org/10.1111/deci.12451
Choi, T.-M., Chan, H. K., & Yue, X. (2017). Recent development in Big Data Analytics for
Business Operations and Risk Management. IEEE Transactions on Cybernetics, 47(1),
8192. https://doi.org/10.1109/tcyb.2015.2507599
Dash, B., Sharma, P., & Swayamsiddha, S. (2019) Resilience or Resistance? Outreach of Big
Data in the Digital Age.
8
De Broe, S., Meijers, R., ten Bosch, O., Buelens, B., Priem, A., Laevens, B., de Jong, T., &
Puts, M. (2019). From experimental to official statistics: The case of solar energy.
Statistical Journal of the IAOS, 35(3), 371385. https://doi.org/10.3233/sji-180458
Gatzert, N., & Schmit, J. (2016). Supporting strategic success through enterprise-wide
reputation risk management. The Journal of Risk Finance, 17(1), 2645.
https://doi.org/10.1108/jrf-09-2015-0083
Giannakis, M., & Louis, M. (2016). A multi-agent based system with big data processing for
enhanced supply chain agility. Journal of Enterprise Information Management, 29(5),
706727. https://doi.org/10.1108/jeim-06-2015-0050
Ivanov, D., Dolgui, A., & Sokolov, B. (2018). The impact of digital technology and Industry
4.0 on the ripple effect and supply chain risk analytics. International Journal of
Production Research, 57(3), 829846.
https://doi.org/10.1080/00207543.2018.1488086
Lu, J., Yan, Z., Han, J., & Zhang, G. (2019). Data-driven decision-making (D3M):
Framework, methodology, and directions. IEEE Transactions on Emerging Topics in
Computational Intelligence, 3(4), 286296. https://doi.org/10.1109/tetci.2019.2915813
Machorro-Cano, I., Alor-Hernández, G., Paredes-Valverde, M. A., Rodríguez-Mazahua, L.,
Sánchez-Cervantes, J. L., & Olmedo-Aguirre, J. O. (2020). Hems-IOT: A big data and
machine learning-based Smart Home System for Energy Saving. Energies, 13(5),
1097. https://doi.org/10.3390/en13051097
Saltz, J. S., & Lahiri, S. (2020). The Need for an Enterprise Risk Management Framework for
Big Data Science Projects. In DATA (pp. 268-274).
Sharma, P., & Dash, B. (2020). Big Data-IoE Relationships and the Future of Smart Cities.
Shin, B., & Lowry, P. B. (2020). A review and theoretical explanation of the 'Cyberthreat-
Intelligence (CTI) capability' that needs to be fostered in information security
practitioners and how this can be accomplished. Computers & Security, 92,
101761. https://doi.org/10.1016/j.cose.2020.101761
Visvizi, A., Troisi, O., Grimaldi, M., & Loia, F. (2021). Think human, ACT digital:
Activating data-driven orientation in innovative start-ups. European Journal of
Innovation Management, 25(6), 452478. https://doi.org/10.1108/ejim-04-2021-0206
Wang, Y., Kung, L., & Byrd, T. A. (2018). Big Data Analytics: Understanding its capabilities
and potential benefits for healthcare organizations. Technological Forecasting and
Social Change, 126, 313. https://doi.org/10.1016/j.techfore.2015.12.019
Wang, G., Gunasekaran, A., Ngai, E. W. T., & Papadopoulos, T. (2016). Big Data Analytics
in logistics and supply chain management: Certain investigations for research and
applications. International Journal of Production Economics, 176, 98110.
https://doi.org/10.1016/j.ijpe.2016.03.014
Wang, J., Neil, M., & Fenton, N. (2020). A bayesian network approach for cybersecurity risk
assessment implementing and extending The fair model. Computers & Security,
89, 101659. https://doi.org/10.1016/j.cose.2019.101659
Yang, X., McEwen, R., Ong, L. R., & Zihayat, M. (2020). A big data analytics framework for
detecting user-level depression from social networks. International Journal of
Information Management, 54, 102141. https://doi.org/10.1016/j.ijinfomgt.2020.102141
ResearchGate has not been able to resolve any citations for this publication.
Article
Full-text available
Big data has become a ubiquitous part of modern business due to the development of technology and influence of social media. In dynamic business environments, managing this much big data is neither very seductive nor particularly simple. These data are consumer-driven and consumer-focused. That makes these data special. As data storage prices decrease as a result of cloud growth, data volumes are growing across the board for the company. Every firm is putting a greater emphasis on data-driven decision making, which forces them to concentrate on information extraction and data management. The article explores whether the explosion of big data and its applications is advantageous for the digital age, or on the contrary, it serves as a distraction from more pressing issues and confuses us more than it aids. We also aim on the intellectual underpinnings of big data and how it affects management and organizational performance.
Article
Full-text available
Urbanization has become a serious problem across most countries. Many developing countries like China and India are identified as suffering from the rise of urbanization over the past few years. The development of smart cities is an effective solution to major problems within most cities today. Internet of Everything (IoE) is identified as a critical solution needed in developing smart cities of the future. The Internet of Everything is identified as the networked connection of data, things, processes, and people. This means that IoT devices are a crucial element of the IoE but big data plays a key role in storing and processing those information for insight extraction. The study adopts a systematic review methodology. The selected articles are reviewed and analyzed to provide answers to the objectives selected. Each of these concepts is guided by the multidisciplinary theoretical framework. The Framework identifies that the components within a smart city should be interconnected, as identified in the pillars of the IoE.
Article
Full-text available
Energy efficiency has aroused great interest in research worldwide, because energy consumption has increased in recent years, especially in the residential sector. The advances in energy conversion, along with new forms of communication, and information technologies have paved the way for what is now known as smart homes. The Internet of Things (IoT) is the convergence of various heterogeneous technologies from different application domains that are used to interconnect things through the Internet, thus allowing for the detection, monitoring, and remote control of multiple devices. Home automation systems (HAS) combined with IoT, big data technologies, and machine learning are alternatives that promise to contribute to greater energy efficiency. This work presents HEMS-IoT, a big data and machine learning-based smart home energy management system for home comfort, safety, and energy saving. We used the J48 machine learning algorithm and Weka API to learn user behaviors and energy consumption patterns and classify houses with respect to energy consumption. Likewise, we relied on RuleML and Apache Mahout to generate energy-saving recommendations based on user preferences to preserve smart home comfort and safety. To validate our system, we present a case study where we monitor a smart home to ensure comfort and safety and reduce energy consumption.
Article
Full-text available
Quantitative risk assessment can play a crucial role in effective decision making about cybersecurity strategies. The Factor Analysis of Information Risk (FAIR) is one of the most popular models for quantitative cybersecurity risk assessment. It provides a taxonomic framework to classify cybersecurity risk into a set of quantifiable risk factors and combines this with quantitative algorithms, in the form of a kind of Monte Carlo (MC) simulation combined with statistical approximation techniques, to estimate cybersecurity risk. However, the FAIR algorithms restrict both the type of statistical distributions that can be used and the expandability of the model structure. Moreover, the applied approximation techniques (including using cached data and interpolation methods) introduce inaccuracy into the FAIR model. To address restrictions of the FAIR model, we develop a more flexible alternative approach, which we call FAIR-BN, to implement the FAIR model using Bayesian Networks (BNs). To evaluate the performance of FAIR and FAIR-BN, we use a MC method (FAIR-MC) to implement calculations of the FAIR model without using any of the approximation techniques adopted by FAIR, thus avoiding the corresponding inaccuracy that can be introduced. We compare the empirical results generated by FAIR and FAIR-BN against a large number of samples generated using FAIR-MC. Both FAIR and FAIR-BN provide consistent results compared with FAIR-MC for general cases. However, the FAIR-BN achieves higher accuracy in several cases that cannot be accurately modelled by the FAIR model. Moreover, we demonstrate that FAIR-BN is more flexible and extensible by showing how it can incorporate process-oriented and game-theoretic methods. We call the resulting combined approach “Extended FAIR-BN” (EFBN) and show that it has the potential to provide an integrated solution for cybersecurity risk assessment and related decision making.
Article
Purpose The study queries the drivers of innovation management in contemporary data-driven organizations/companies. It is argued that data-driven organizations that integrate a strategic orientation grounded in data, human abilities and proactive management are more effective in triggering innovation. Design/methodology/approach Research reported in this paper employs constructivist grounded theory, Gioia methodology, and the abductive approach. The data collected through semi-structured interviews administered to 20 Italian start-up founders are then examined. Findings The paper identifies the key enablers of innovation development in data-driven companies and reveals that data-driven companies may generate different innovation patterns depending on the kind of capabilities activated. Originality/value The study provides evidence of how the combination of data-driven culture, skills' enhancement and the promotion of human resources may boost the emergence of innovation.
Article
A decision problem, according to traditional principles, is approached by finding an optimal solution to an analytical programming decision model, which is known as model-driven decision-making. The fidelity of the model determines the quality and reliability of the decision-making; however, the intrinsic complexity of many real-world decision problems leads to significant model mismatch or infeasibility in deriving a model using the first principle. To overcome the challenges that are present in the big data era, both researchers and practitioners emphasize the importance of making decisions that are backed up by data related to decision tasks, a process called data-driven decision-making (D <sup xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">3</sup> M). By building on data science, not only can decision models be predicted in the presence of uncertainty or unknown dynamics, but also inherent rules or knowledge can be extracted from data and directly utilized to generate decision solutions. This position paper systematically discusses the basic concepts and prevailing techniques in data-driven decision-making and clusters-related developments in technique into two main categories: programmable data-driven decision-making (P-D <sup xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">3</sup> M) and nonprogrammable data-driven decision-making (NP-D <sup xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">3</sup> M). This paper establishes a D <sup xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">3</sup> M technical framework, main methodologies, and approaches for both categories of D <sup xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">3</sup> M, as well as identifies potential methods and procedures for using data to support decision-making. It also provides examples of how D <sup xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">3</sup> M is implemented in practice and identifies five further research directions in the D <sup xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">3</sup> M area. We believe that this paper will directly support researchers and professionals in their understanding of the fundamentals of D <sup xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">3</sup> M and of the developments in technical methods
Article
Depression is one of the most common mental health problems worldwide. The diagnosis of depression is usually done by clinicians based on mental status questionnaires and patient's self-reporting. Not only do these methods highly depend on the current mood of the patient, but also people who experience mental illness are often reluctantly seeking help. Social networks have become a popular platform for people to express their feelings and thoughts with friends and family. With the substantial amount of data in social networks, there is an opportunity to try designing novel frameworks to identify those at risk of depression. Moreover, such frameworks can provide clinicians and hospitals with deeper insights about depressive behavioral patterns, thereby improving diagnostic process. In this paper, we propose a big data analytics framework to detect depression for users of social networks. In addition to syntactic and syntax features, it focuses on pragmatic features toward modeling the intention of users. User intention represents the true motivation behind social network behaviors. Moreover, since the behaviors of user's friends in the network are believed to have an influence on the user, the framework also models the influence of friends on the user's mental states. We evaluate the performance of the proposed framework on a massive real dataset obtained from Facebook and show that the framework outperforms existing methods for diagnosing user-level depression in social networks.
Article
Operational risk management (ORM) is critical for any organization, and in the big data era, analytical tools for operational risk management are evolving faster than ever. This paper examines recent developments in academic ORM literature from the data analyt-ics perspective. We focus on identifying present trends in ORM related to various types of natural and man-made disasters that have been challenging all aspects of life. Although we examine the broader operations management (OM) literature, we keep the focus on the articles published in the well-regarded OM journals, including both empirical and analytical outlets. We highlight how the use of data analytics tools and methods have facilitated ORM. We discuss the need for data monitoring and the integration of various analytical tools into decision making processes by classifying the literature on application fields, analytics techniques, and the strategies used for implementation. We summarize our findings and propose a process to implement data-driven ORM with future research directions.
Article
Given the global increase in crippling cyberattacks, organizations are increasingly turning to cyberthreat intelligence (CTI). CTI represents actionable threat information that is relevant to a specific organization and that thus demands its close attention. CTI efforts aim to help organizations “know their enemies better” for proactive, preventive, and timely threat detection and remediation—complementing conventional risk-management paradigms designed to improve ‘general readiness’ against known or unknown threats. Organizational security (OrgSec) and behavioral security research has lagged behind CTI's growing potential to address current cybersecurity challenges. Instead, CTI has largely been the purview of computer science from an algorithmic perspective. However, OrgSec and behavioral researchers can contribute a further combined knowledge of design for the organization, human factors, and organizational governance to foster CTI. In this theory-building and review manuscript, we propose the CTI capability model (CTI-CM) to prescribe the key capabilities necessary for a CTI practitioner to engage effectively in CTI activities. The CTI-CM defines a practitioner's CTI capability in terms of three highly interrelated but conceptually distinctive dimensions: analytical component capability, contextual response capability, and experiential practice capability. We further explain how these capabilities can be fostered, and the key implications for leading security practice in organizations.