In the context of process management, the aspect of process execution risk has rarely been considered; in the instances where it has been studied it was analyzed mostly from a project management perspective. But risk is an inherent property of every business process and techniques are needed to identify, represent and analyze business process risks. The absence of such techniques is a concern because both operational risk mitigation and legal compliance depend on the sufficient identification of corporate risk. We have recently started to address the topic of risk management in the context of business process management. At the project level we analyze which project risks are specific to business process management projects and what mitigation techniques are available to increase the probability of success for a given process management project. At the process level we develop a taxonomy of process-related risks and study how this taxonomy can be applied in the analysis and documentation of business processes. Our goal is to extend contemporary process modeling methods to document process-related risks and their relationships with goals, other risks and processes. The first results of this work were published at the BPD Workshop in September and the ACIS Conference in December 2005.

• zur Muehlen, Michael; Ho, Danny Ting-Yi: Risk Management in the BPM Lifecycle. In: Bussler, Christoph; Haller, Armin (Eds.): Business Process Management Workshops: BPM 2005 International Workshops, BPI, BPD, ENEI, BPRM, WSCOBPM, BPS, Nancy, France, September 5, 2005. Revised Selected Papers, Springer LNCS 3812, Berlin 2006, pp. 454-466.
• zur Muehlen, Michael; Rosemann, Michael: Integrating Risks in Business Process Models. Proceedings of the 2005 Australasian Conference on Information Systems. Manly Beach, Sydney, Australia (winner of best paper award)
• Neiger, Dina; Churilov, Leonid; zur Muehlen, Michael; Rosemann, Michael: Integrating Risks in Business Process Models with Value Focused Process Engineering. In: Proceedings of the 2006 European Conference on Information Systems (ECIS 2006), Goteborg, Sweden, June 12-14, 2006.