Riskien arviointi IT-investointipäätöksenteossa tapaustutkimus asiakas- ja potilastietojärjestelmähankinnasta

Riskien arviointia ohjaa organisaation riskienhallinta, strategia sekä sen kulttuuri. Riskien arvioinnin prosessi koostuu karkeasti sanottuna riskianalyysistä, joka sisältää riskien tunnistamisen ja niiden analysoinnin sen kontekstin kannalta, missä riski esiintyy. Riskien arviointi on usein osa myö...

Täydet tiedot

Bibliografiset tiedot
Päätekijä: Jääskeläinen, Susanna
Muut tekijät: Informaatioteknologian tiedekunta, Faculty of Information Technology, Informaatioteknologia, Information Technology, Jyväskylän yliopisto, University of Jyväskylä
Aineistotyyppi: Pro gradu
Kieli:fin
Julkaistu: 2018
Aiheet:
Linkit: https://jyx.jyu.fi/handle/123456789/58592
_version_ 1828193091190784000
author Jääskeläinen, Susanna
author2 Informaatioteknologian tiedekunta Faculty of Information Technology Informaatioteknologia Information Technology Jyväskylän yliopisto University of Jyväskylä
author_facet Jääskeläinen, Susanna Informaatioteknologian tiedekunta Faculty of Information Technology Informaatioteknologia Information Technology Jyväskylän yliopisto University of Jyväskylä Jääskeläinen, Susanna Informaatioteknologian tiedekunta Faculty of Information Technology Informaatioteknologia Information Technology Jyväskylän yliopisto University of Jyväskylä
author_sort Jääskeläinen, Susanna
datasource_str_mv jyx
description Riskien arviointia ohjaa organisaation riskienhallinta, strategia sekä sen kulttuuri. Riskien arvioinnin prosessi koostuu karkeasti sanottuna riskianalyysistä, joka sisältää riskien tunnistamisen ja niiden analysoinnin sen kontekstin kannalta, missä riski esiintyy. Riskien arviointi on usein osa myös investointipäätöksentekoa, jolla tässä tutkielmassa tarkoitetaan organisaation investointiin kohdistuvaa päätöksentekoprosessia. Investointi on organisaation ja toimittajan välinen formaali sopimus siitä, että organisaatio saa toimittajan tarjoaman hyödykkeen käyttöönsä rahaa vastaan. IT-investoinnissa kohteena on jokin informaatioteknologian alan hyödyke. Tässä tutkielmassa tutkittiin riskien arviointia investointipäätöksentekoprosessissa, joka kohdistui suuren tietojärjestelmän hankintaan organisaatiossa. Tutkimuksen empiirinen osuus toteutettiin tarkastelemalla sosiaali- ja terveysalan asiakas- ja potilastietojärjestelmähankintaan (APTJ-hankinta) kohdistuvaa investointipäätöksentekoa. Tutkimuksen tavoitteena oli selvittää, kuinka riskien arviointi toteutettiin kyseisessä IT-investointipäätöksenteossa ja hyödynnettiinkö riskien arvioinnissa joitain sille laadittuja malleja tai menetelmiä. Tutkimus oli tapaustutkimus ja empiirinen osuus toteutettiin kvalitatiivisella haastattelututkimuksella. Tutkimuskohteena olivat Suomen kuusi eri sairaanhoitopiiriä, joissa haastateltiin APTJ-hankintaan kohdistuvaan investointipäätöksentekoon osallistuneita henkilöitä. Sekä kyseiseen hankintaan mukaan lähteneitä että hankinnasta kieltäytyneitä sairaanhoitopiirejä haastateltiin. Tutkimuksen tulokset osoittivat, että IT-investointipäätöksentekoprosessin aikainen riskien arviointi ei ollut eksplisiittistä riskien arviointia, vaan sitä toteutettiin pääasiassa muiden keskusteluiden ohessa ja esimerkiksi ROI-laskelman yhteydessä. Riskien arvioinnissa kuitenkin hyödynnettiin jonkun verran lähdekirjallisuudesta esiin nousseita riskien arvioinnin tapoja, kuten SWOT-analyysiä ja riskien arviointia sekä kvalitatiivisesta että kvantitatiivisesta näkökulmasta. Tutkimustuloksia voidaan hyödyntää sekä julkisen että yksityisen sektorin suurissa tietojärjestelmähankinnoissa laadittaessa ohjeistusta investointipäätöksenteon aikaiselle riskien arvioinnille. Lisäksi tutkimustuloksia voidaan hyödyntää jatkotutkimuksessa. Risk assessment is directed by organisation’s risk management, strategy, and organisational culture. The process of risk management roughly consists of risk analysis, which includes recognising risks and analysing them. Risk assessment is often a part of investment decision making, which stands for the decision-making process that concerns organisation’s investment. An investment is a formal agreement made between the organisation and the supplier about the terms by which the supplier delivers specific goods for organisation’s resources. The object of an IT-investment is some product on information technology’s field. The research implemented within the limits of this thesis looks into risk assessment in investment decision making process, during which the decision is made whether the organisation does invest in a large information system (IS) or not. The empirical part of the research studied the investment decision making process which’s object is a customer and patient information system procurement (CPIS-procurement) on the social welfare and healthcare area. The aim of this research was to find out how risk assessment was carried out in the IT-investment decision making, and whether some models for risk assessment were used. The research was a case study, and the research method on the empirical stage was a qualitative interview research. The research subjects were such personnel in six Finnish healthcare districts, who took part in the investment decision making about the CPIS-procurement in question. Both participated and declined healthcare districts were included in the interviews. The results of the research suggest that risk assessment that was carried out during the investment decision making process was not done explicitly, but rather alongside other discussions, and when calculating the ROI. Nevertheless, some risk assessment practices, such as SWOT-analysis and qualitative and quantitative risk analysis that emerged from the source books, were exploited in the risk assessment. The results of the study can be utilized in both public and private organizations when formulating instructions for risk assessment which is to be carried out during the investment decision making process. Additionally, the findings can be deployed in further research.
first_indexed 2019-08-19T08:21:43Z
format Pro gradu
free_online_boolean 1
fullrecord [{"key": "dc.contributor.advisor", "value": "Pirhonen, Maritta", "language": "", "element": "contributor", "qualifier": "advisor", "schema": "dc"}, {"key": "dc.contributor.author", "value": "J\u00e4\u00e4skel\u00e4inen, Susanna", "language": "", "element": "contributor", "qualifier": "author", "schema": "dc"}, {"key": "dc.date.accessioned", "value": "2018-06-15T10:07:43Z", "language": null, "element": "date", "qualifier": "accessioned", "schema": "dc"}, {"key": "dc.date.available", "value": "2018-06-15T10:07:43Z", "language": null, "element": "date", "qualifier": "available", "schema": "dc"}, {"key": "dc.date.issued", "value": "2018", "language": "", "element": "date", "qualifier": "issued", "schema": "dc"}, {"key": "dc.identifier.uri", "value": "https://jyx.jyu.fi/handle/123456789/58592", "language": null, "element": "identifier", "qualifier": "uri", "schema": "dc"}, {"key": "dc.description.abstract", "value": "Riskien arviointia ohjaa organisaation riskienhallinta, strategia sek\u00e4 sen kulttuuri. Riskien arvioinnin prosessi koostuu karkeasti sanottuna riskianalyysist\u00e4, joka sis\u00e4lt\u00e4\u00e4 riskien tunnistamisen ja niiden analysoinnin sen kontekstin kannalta, miss\u00e4 riski esiintyy. Riskien arviointi on usein osa my\u00f6s investointip\u00e4\u00e4t\u00f6ksentekoa, jolla t\u00e4ss\u00e4 tutkielmassa tarkoitetaan organisaation investointiin kohdistuvaa p\u00e4\u00e4t\u00f6ksentekoprosessia. Investointi on organisaation ja toimittajan v\u00e4linen formaali sopimus siit\u00e4, ett\u00e4 organisaatio saa toimittajan tarjoaman hy\u00f6dykkeen k\u00e4ytt\u00f6\u00f6ns\u00e4 rahaa vastaan. IT-investoinnissa kohteena on jokin informaatioteknologian alan hy\u00f6dyke. T\u00e4ss\u00e4 tutkielmassa tutkittiin riskien arviointia investointip\u00e4\u00e4t\u00f6ksentekoprosessissa, joka kohdistui suuren tietoj\u00e4rjestelm\u00e4n hankintaan organisaatiossa. Tutkimuksen empiirinen osuus toteutettiin tarkastelemalla sosiaali- ja terveysalan asiakas- ja potilastietoj\u00e4rjestelm\u00e4hankintaan (APTJ-hankinta) kohdistuvaa investointip\u00e4\u00e4t\u00f6ksentekoa. Tutkimuksen tavoitteena oli selvitt\u00e4\u00e4, kuinka riskien arviointi toteutettiin kyseisess\u00e4 IT-investointip\u00e4\u00e4t\u00f6ksenteossa ja hy\u00f6dynnettiink\u00f6 riskien arvioinnissa joitain sille laadittuja malleja tai menetelmi\u00e4. Tutkimus oli tapaustutkimus ja empiirinen osuus toteutettiin kvalitatiivisella haastattelututkimuksella. Tutkimuskohteena olivat Suomen kuusi eri sairaanhoitopiiri\u00e4, joissa haastateltiin APTJ-hankintaan kohdistuvaan investointip\u00e4\u00e4t\u00f6ksentekoon osallistuneita henkil\u00f6it\u00e4. Sek\u00e4 kyseiseen hankintaan mukaan l\u00e4hteneit\u00e4 ett\u00e4 hankinnasta kielt\u00e4ytyneit\u00e4 sairaanhoitopiirej\u00e4 haastateltiin. Tutkimuksen tulokset osoittivat, ett\u00e4 IT-investointip\u00e4\u00e4t\u00f6ksentekoprosessin aikainen riskien arviointi ei ollut eksplisiittist\u00e4 riskien arviointia, vaan sit\u00e4 toteutettiin p\u00e4\u00e4asiassa muiden keskusteluiden ohessa ja esimerkiksi ROI-laskelman yhteydess\u00e4. Riskien arvioinnissa kuitenkin hy\u00f6dynnettiin jonkun verran l\u00e4hdekirjallisuudesta esiin nousseita riskien arvioinnin tapoja, kuten SWOT-analyysi\u00e4 ja riskien arviointia sek\u00e4 kvalitatiivisesta ett\u00e4 kvantitatiivisesta n\u00e4k\u00f6kulmasta. Tutkimustuloksia voidaan hy\u00f6dynt\u00e4\u00e4 sek\u00e4 julkisen ett\u00e4 yksityisen sektorin suurissa tietoj\u00e4rjestelm\u00e4hankinnoissa laadittaessa ohjeistusta investointip\u00e4\u00e4t\u00f6ksenteon aikaiselle riskien arvioinnille. Lis\u00e4ksi tutkimustuloksia voidaan hy\u00f6dynt\u00e4\u00e4 jatkotutkimuksessa.", "language": "fi", "element": "description", "qualifier": "abstract", "schema": "dc"}, {"key": "dc.description.abstract", "value": "Risk assessment is directed by organisation\u2019s risk management, strategy, and organisational culture. The process of risk management roughly consists of risk analysis, which includes recognising risks and analysing them. Risk assessment is often a part of investment decision making, which stands for the decision-making process that concerns organisation\u2019s investment. An investment is a formal agreement made between the organisation and the supplier about the terms by which the supplier delivers specific goods for organisation\u2019s resources. The object of an IT-investment is some product on information technology\u2019s field. The research implemented within the limits of this thesis looks into risk assessment in investment decision making process, during which the decision is made whether the organisation does invest in a large information system (IS) or not. The empirical part of the research studied the investment decision making process which\u2019s object is a customer and patient information system procurement (CPIS-procurement) on the social welfare and healthcare area. The aim of this research was to find out how risk assessment was carried out in the IT-investment decision making, and whether some models for risk assessment were used. The research was a case study, and the research method on the empirical stage was a qualitative interview research. The research subjects were such personnel in six Finnish healthcare districts, who took part in the investment decision making about the CPIS-procurement in question. Both participated and declined healthcare districts were included in the interviews. The results of the research suggest that risk assessment that was carried out during the investment decision making process was not done explicitly, but rather alongside other discussions, and when calculating the ROI. Nevertheless, some risk assessment practices, such as SWOT-analysis and qualitative and quantitative risk analysis that emerged from the source books, were exploited in the risk assessment. The results of the study can be utilized in both public and private organizations when formulating instructions for risk assessment which is to be carried out during the investment decision making process. Additionally, the findings can be deployed in further research.", "language": "en", "element": "description", "qualifier": "abstract", "schema": "dc"}, {"key": "dc.description.provenance", "value": "Submitted by Paivi Vuorio (paelvuor@jyu.fi) on 2018-06-15T10:07:42Z\nNo. of bitstreams: 0", "language": "en", "element": "description", "qualifier": "provenance", "schema": "dc"}, {"key": "dc.description.provenance", "value": "Made available in DSpace on 2018-06-15T10:07:43Z (GMT). No. of bitstreams: 0\n Previous issue date: 2018", "language": "en", "element": "description", "qualifier": "provenance", "schema": "dc"}, {"key": "dc.format.extent", "value": "84", "language": "", "element": "format", "qualifier": "extent", "schema": "dc"}, {"key": "dc.format.mimetype", "value": "application/pdf", "language": null, "element": "format", "qualifier": "mimetype", "schema": "dc"}, {"key": "dc.language.iso", "value": "fin", "language": null, "element": "language", "qualifier": "iso", "schema": "dc"}, {"key": "dc.rights", "value": "In Copyright", "language": "en", "element": "rights", "qualifier": null, "schema": "dc"}, {"key": "dc.subject.other", "value": "investointip\u00e4\u00e4t\u00f6ksenteko", "language": "", "element": "subject", "qualifier": "other", "schema": "dc"}, {"key": "dc.subject.other", "value": "IT-investoinnit", "language": "", "element": "subject", "qualifier": "other", "schema": "dc"}, {"key": "dc.title", "value": "Riskien arviointi IT-investointip\u00e4\u00e4t\u00f6ksenteossa : tapaustutkimus asiakas- ja potilastietoj\u00e4rjestelm\u00e4hankinnasta", "language": "", "element": "title", "qualifier": null, "schema": "dc"}, {"key": "dc.type", "value": "master thesis", "language": null, "element": "type", "qualifier": null, "schema": "dc"}, {"key": "dc.identifier.urn", "value": "URN:NBN:fi:jyu-201806153243", "language": "", "element": "identifier", "qualifier": "urn", "schema": "dc"}, {"key": "dc.type.ontasot", "value": "Pro gradu -tutkielma", "language": "fi", "element": "type", "qualifier": "ontasot", "schema": "dc"}, {"key": "dc.type.ontasot", "value": "Master\u2019s thesis", "language": "en", "element": "type", "qualifier": "ontasot", "schema": "dc"}, {"key": "dc.contributor.faculty", "value": "Informaatioteknologian tiedekunta", "language": "fi", "element": "contributor", "qualifier": "faculty", "schema": "dc"}, {"key": "dc.contributor.faculty", "value": "Faculty of Information Technology", "language": "en", "element": "contributor", "qualifier": "faculty", "schema": "dc"}, {"key": "dc.contributor.department", "value": "Informaatioteknologia", "language": "fi", "element": "contributor", "qualifier": "department", "schema": "dc"}, {"key": "dc.contributor.department", "value": "Information Technology", "language": "en", "element": "contributor", "qualifier": "department", "schema": "dc"}, {"key": "dc.contributor.organization", "value": "Jyv\u00e4skyl\u00e4n yliopisto", "language": "fi", "element": "contributor", "qualifier": "organization", "schema": "dc"}, {"key": "dc.contributor.organization", "value": "University of Jyv\u00e4skyl\u00e4", "language": "en", "element": "contributor", "qualifier": "organization", "schema": "dc"}, {"key": "dc.subject.discipline", "value": "Tietoj\u00e4rjestelm\u00e4tiede", "language": "fi", "element": "subject", "qualifier": "discipline", "schema": "dc"}, {"key": "dc.subject.discipline", "value": "Information Systems Science", "language": "en", "element": "subject", "qualifier": "discipline", "schema": "dc"}, {"key": "yvv.contractresearch.collaborator", "value": "public", "language": "", "element": "contractresearch", "qualifier": "collaborator", "schema": "yvv"}, {"key": "yvv.contractresearch.funding", "value": "7000", "language": "", "element": "contractresearch", "qualifier": "funding", "schema": "yvv"}, {"key": "yvv.contractresearch.initiative", "value": "business", "language": "", "element": "contractresearch", "qualifier": "initiative", "schema": "yvv"}, {"key": "dc.type.coar", "value": "http://purl.org/coar/resource_type/c_bdcc", "language": null, "element": "type", "qualifier": "coar", "schema": "dc"}, {"key": "dc.rights.accesslevel", "value": "openAccess", "language": null, "element": "rights", "qualifier": "accesslevel", "schema": "dc"}, {"key": "dc.type.publication", "value": "masterThesis", "language": null, "element": "type", "qualifier": "publication", "schema": "dc"}, {"key": "dc.subject.oppiainekoodi", "value": "601", "language": "", "element": "subject", "qualifier": "oppiainekoodi", "schema": "dc"}, {"key": "dc.subject.yso", "value": "potilastietoj\u00e4rjestelm\u00e4t", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "julkiset hankinnat", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "p\u00e4\u00e4t\u00f6ksenteko", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "riskinarviointi", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "riskienhallinta", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.subject.yso", "value": "riskit", "language": null, "element": "subject", "qualifier": "yso", "schema": "dc"}, {"key": "dc.format.content", "value": "fulltext", "language": null, "element": "format", "qualifier": "content", "schema": "dc"}, {"key": "dc.rights.url", "value": "https://rightsstatements.org/page/InC/1.0/", "language": null, "element": "rights", "qualifier": "url", "schema": "dc"}, {"key": "dc.type.okm", "value": "G2", "language": null, "element": "type", "qualifier": "okm", "schema": "dc"}]
id jyx.123456789_58592
language fin
last_indexed 2025-03-31T20:02:33Z
main_date 2018-01-01T00:00:00Z
main_date_str 2018
online_boolean 1
online_urls_str_mv {"url":"https:\/\/jyx.jyu.fi\/bitstreams\/3b95d9af-1f03-40a4-a3c7-d31bca267b6c\/download","text":"URN:NBN:fi:jyu-201806153243.pdf","source":"jyx","mediaType":"application\/pdf"}
publishDate 2018
record_format qdc
source_str_mv jyx
spellingShingle Jääskeläinen, Susanna Riskien arviointi IT-investointipäätöksenteossa : tapaustutkimus asiakas- ja potilastietojärjestelmähankinnasta investointipäätöksenteko IT-investoinnit Tietojärjestelmätiede Information Systems Science 601 potilastietojärjestelmät julkiset hankinnat päätöksenteko riskinarviointi riskienhallinta riskit
title Riskien arviointi IT-investointipäätöksenteossa : tapaustutkimus asiakas- ja potilastietojärjestelmähankinnasta
title_full Riskien arviointi IT-investointipäätöksenteossa : tapaustutkimus asiakas- ja potilastietojärjestelmähankinnasta
title_fullStr Riskien arviointi IT-investointipäätöksenteossa : tapaustutkimus asiakas- ja potilastietojärjestelmähankinnasta Riskien arviointi IT-investointipäätöksenteossa : tapaustutkimus asiakas- ja potilastietojärjestelmähankinnasta
title_full_unstemmed Riskien arviointi IT-investointipäätöksenteossa : tapaustutkimus asiakas- ja potilastietojärjestelmähankinnasta Riskien arviointi IT-investointipäätöksenteossa : tapaustutkimus asiakas- ja potilastietojärjestelmähankinnasta
title_short Riskien arviointi IT-investointipäätöksenteossa
title_sort riskien arviointi it investointipäätöksenteossa tapaustutkimus asiakas ja potilastietojärjestelmähankinnasta
title_sub tapaustutkimus asiakas- ja potilastietojärjestelmähankinnasta
title_txtP Riskien arviointi IT-investointipäätöksenteossa : tapaustutkimus asiakas- ja potilastietojärjestelmähankinnasta
topic investointipäätöksenteko IT-investoinnit Tietojärjestelmätiede Information Systems Science 601 potilastietojärjestelmät julkiset hankinnat päätöksenteko riskinarviointi riskienhallinta riskit
topic_facet 601 IT-investoinnit Information Systems Science Tietojärjestelmätiede investointipäätöksenteko julkiset hankinnat potilastietojärjestelmät päätöksenteko riskienhallinta riskinarviointi riskit
url https://jyx.jyu.fi/handle/123456789/58592 http://www.urn.fi/URN:NBN:fi:jyu-201806153243
work_keys_str_mv AT jääskeläinensusanna riskienarviointiitinvestointipäätöksenteossatapaustutkimusasiakasjapotilasti