Designing and evaluating layered security. (1st January 2013)

• Record Type: Journal Article
• Authors: Lord, Steven; Nunes-Vaz, Rick
• Is Part Of: International journal of risk assessment and management. Volume 17:Number 1)
• Page Start: 19
• Page End: 45
• Publication Date: 2013-01-01
• Subjects: security risk -- security risk analysis -- security risk assessment -- security risk management -- layered security -- security-in-depth -- security layers -- security system design -- security system evaluation -- security control optimisation -- physical security -- complex security systems; Risk assessment -- Periodicals; Risk management -- Periodicals; 361.1
• Languages: English
• ISSNs: 1466-8297

Abstract

Following systems engineering principles, we introduce analytic means to qualitatively judge and quantitatively assess layering of security controls with the aim of optimising risk reduction. The emphasis is on evaluating security controls in real world systems, where complications such as uncertainty, scale, multiple threats, multiple events, and multiple pathways from threat to event to consequences, confound the neat, and often used, picture of layering controls as rings around the bulls-eye of consequences. An example of physical security at a facility is given, with a quantitative illustration of optimising the layering of controls according to cost constraints.