Data Loss Risk: A Multivariate Statistical Methodology Proposal
DOI:
https://doi.org/10.14738/abr.58.3598Keywords:
Data Loss Risk, hierarchization of risk eventsAbstract
Given that an adequate prioritization of data losses (DL) events is crucial for risk management in institutions of any nature, the present paper proposes a methodology aimed at hierarchizing the events associated with this type of risk. This proposal incorporates three specifications : parametric independence, objectivity and applicability. To illustrate , a framework was applied to records of DatalossDB, a US risk database. An hierarchy model based on Conjoint Analysis (CA) was developed by associating DL with industry sector, incident source and incident type variables. The flexibility of CA derives from its ability to use metric or non-metric variables, as well as from the lack of rigid rules regarding the relation between the combination of attributes and the preferences. The procedure determined the importance of the attributes involved and allowed the prioritization of risk events, which will certainly be useful in guiding the actions towards minimizing the problem.
References
Borges, J., F., Moura, H.,J,.(2010) Integração entre abordagens qualitativa e quantitativa para a mitigação do risco operacional: estudo no Banco Central do Brasil. Anais do ENANPAD 2010. Encontro da ANPAD, Rio de Janeiro.
Bühlmann, H., Shevchenko, P., V., Wüthrich, M.,V.,(2007) A "Toy" Model for Operational Risk Quantification using Credibility Theory. The Journal of Operational Risk, v. 2, n. 1, p. 3-20.
Chernobai, A.,S., Rachev, S.,T.,Fabozzi, F.,J. (2007) Operational risk : a guide to Basel II capital requirements, models and analysis. New Jersey : John Wiley & Sons.
Cruz, M . (2004) Operational risk modeling and analysis. London : Incisive financial publishing ltd.
Fávero, L,.P.,Belfiore, P.,Silva, F,.L.,Chan, B.,L.(2009) Análise de dados : modelagem multivariada para tomada de decisões. São Paulo, SP: Elsevier
Gabbay, A.,M.(2010) Simulação de Monte Carlo para Mensuração do Risco Operacional: Aplicação do Modelo LDA, Dissertação de mestrado. Universidade Presbiteriana Mackenzie São Paulo.
Giudici, P. (2004) Integration of Qualitative and Quantitative Operational Risk Data: A bayesian approach. In: Cruz, M (editor). Operational Risk Modelling and Analysis: theory and practice. p. 131-138. London: Risk Books.
Goodwin, P., Wright, G.(2004) Decision Analysis for Management Judgment, 3rd ed, London : John Wiley & Sons Ltd.
Hair Jr, J., Anderson, R., E.,Tatham, R., L., Black, W.,C. (2005) Análise multivariada de dados, 5a edição, Porto Alegre: Artmed.
Jobst, A. ,A. (2007) Consistent Quantitative Operational Risk Measurement and Regulation: challenges of model specification, data collection and loss reporting. IMF Working Paper, November.
McClave, J.,T.,Benson, P.,G. (1990) Statistics for business and economics. Canada: Maxwell Macmillan International Edition.
Okunev, P. (2005). Simple approach to combining internal and external operational loss data in social science research network (Workpaper). Lawrence Berkeley National Laboratory
OSF Open Security Foundation (2014). DataLossDB [data file]. Retrieved from http://datalossdb.org.
Ribas, J. ,R., Vieira, P., R. ,C.(2011) Análise multivariada com o uso do SPSS, Rio de Janeiro : Ed. Ciência Moderna.
Yasuda, I. (2003) Application of Bayesian Inference to Operational Risk Management. Master of Finance, University of Tsukuba, Japan.
