GIRA: a general model for incident risk analysis. Issue 2 (1st February 2019)

• Record Type: Journal Article
• Authors: Couce-Vieira, Aitor; Rios Insua, David; Houmb, Siv Hilde
• Is Part Of: Journal of risk research. Volume 22:Issue 2(2019)
• Page Start: 191
• Page End: 208
• Publication Date: 2019-02-01
• Subjects: Incident -- risk analysis -- risk evaluation -- decision support -- influence diagram; Technology -- Risk assessment -- Periodicals; Risk management -- Periodicals; Risk assessment -- Periodicals; 658.155
• DOI: 10.1080/13669877.2017.1372509
• Languages: English
• ISSNs: 1366-9877

Abstract

Abstract: Most existing risk analysis methods focus on analysing risks that a system might face throughout its life. However, there is no explicit method for risk analysis during incidents. Approaches such as bow-ties and attack trees provide reliable information about triggers and escalation of incidents, but do not cover risk evaluation. Risk matrices include the entire risk analysis process; however, their risk evaluation approach is oversimplified. This paper presents a General Model for Incident Risk Analysis, which formalises the incident risk analysis process through an influence diagram. Our aim is to provide a decision support model that generates reliable risk information and enhances incident risk evaluation.