Risk-Based Criticality Analysis
نویسندگان
چکیده
Critical infrastructure protection requires the evaluation of the criticality of infrastructures and the prioritization of critical assets. However, criticality analysis is not yet standardized. This paper examines the relation between risk and criticality. It analyzes the similarities and differences in terms of scope, aims, impact, threats and vulnerabilities; and proposes a generic risk-based criticality analysis methodology. The paper also presents a detailed list of impact criteria for assessing the criticality level of infrastructures. Emphasis is placed on impact types that are society-centric and/or sector-centric, unlike traditional risk analysis methodologies that mainly consider the organization-centric impact.
منابع مشابه
12 pages (double space, 12 pt TNR)
Critical Infrastructure Protection requires the prioritization of critical assets and the evaluation of the criticality of infrastructures. However, criticality analysis is not yet standardized. In this paper we examine the relation between security risk and criticality. We analyze the similarities and differences in terms of scope, aims, impacts, threats and vulnerabilities and we suggest how ...
متن کاملModeling the Impact of Controls on Information System Risks
Information system risk management helps to reduce or eliminate risk by implementing appropriate controls. In this paper, we propose a quantification model of controls impact on information system risks by automatizing the residual criticality estimation step of FMECA which is based on a inductive reasoning. For this, we defined three equations based on type and maturity of controls. For testin...
متن کاملUml Based Fmeca in Risk Analysis
Today, as systems become more and more complex, safety is becoming critical. Reducing the risk to an acceptable level with a complete risk management activity is necessary. This paper more precisely focuses on risk analysis; its demonstrate how the use of a risk analysis technic such as the Failure Modes, Effects and Criticality Analysis (FMECA) can be coupled to a object oriented system modeli...
متن کاملA Fuzzy Based Fault Analysis Approach to Analyze Software Quality
One of the important aspects of software development is the software quality. There are different measures of software quality analyzed by different researchers. One of such measure of software quality is the software fault analysis. Software fault analysis itself defines the criticality of software system. There are different parameters to perform this risk analysis. The presented work is abou...
متن کاملA Fuzzy Comprehensive Evaluation Model for Sustainability Risk Evaluation of PPP Projects
Evaluating the sustainability risk level of public–private partnership (PPP) projects can reduce project risk incidents and achieve the sustainable development of the organization. However, the existing studies about PPP projects risk management mainly focus on exploring the impact of financial and revenue risks but ignore the sustainability risks, causing the concept of “sustainability” to be ...
متن کامل