Modelling Risk and Identifying Countermeasure in Organizations
Y. Asnar, and P. Giorgini. page 55--66. Samos, Greece, (31--1 August 2006)LNCS 4347.
Abstract
Modelling and analysing risk is one of the most critical activity
in system engineering. However, in literature approaches like Fault
Tree Analysis, Event Tree Analysis, Failure Modes and Criticality Analysis
focus on the system-to-be without considering the impact of the
associated risks to the organization where the system will operate. The
Tropos framework has been proved effective in modelling strategic interests
of the stakeholders at organizational level. In this paper, we introduce
the extended Tropos goal model to analyse risk at organization
level and we illustrate a number of different techniques to help the analyst
in identifying and enumerating relevant countermeasures for risk
mitigation.
%0 Conference Paper
%1 asnar06
%A Asnar, Yudistira
%A Giorgini, Paolo
%C Samos, Greece
%D 2006
%J First International Workshop on Critical Information Infrastructures Security
%K goal risk should-read
%P 55--66
%T Modelling Risk and Identifying Countermeasure in Organizations
%U http://dx.doi.org/10.1007/11962977_5
%X Modelling and analysing risk is one of the most critical activity
in system engineering. However, in literature approaches like Fault
Tree Analysis, Event Tree Analysis, Failure Modes and Criticality Analysis
focus on the system-to-be without considering the impact of the
associated risks to the organization where the system will operate. The
Tropos framework has been proved effective in modelling strategic interests
of the stakeholders at organizational level. In this paper, we introduce
the extended Tropos goal model to analyse risk at organization
level and we illustrate a number of different techniques to help the analyst
in identifying and enumerating relevant countermeasures for risk
mitigation.
@inproceedings{asnar06,
abstract = {Modelling and analysing risk is one of the most critical activity
in system engineering. However, in literature approaches like Fault
Tree Analysis, Event Tree Analysis, Failure Modes and Criticality Analysis
focus on the system-to-be without considering the impact of the
associated risks to the organization where the system will operate. The
Tropos framework has been proved effective in modelling strategic interests
of the stakeholders at organizational level. In this paper, we introduce
the extended Tropos goal model to analyse risk at organization
level and we illustrate a number of different techniques to help the analyst
in identifying and enumerating relevant countermeasures for risk
mitigation.},
added-at = {2007-04-06T21:39:38.000+0200},
address = {Samos, Greece},
author = {Asnar, Yudistira and Giorgini, Paolo},
biburl = {https://www.bibsonomy.org/bibtex/2bafd61566bfe1160bfc7a0b848c4e4d0/neilernst},
day = {31--1},
interhash = {06e0064ebd9c57e0602b3ef50f343a2f},
intrahash = {bafd61566bfe1160bfc7a0b848c4e4d0},
journal = {First International Workshop on Critical Information Infrastructures Security},
keywords = {goal risk should-read},
month = {August},
note = {LNCS 4347},
pages = {55--66},
timestamp = {2007-04-06T21:39:38.000+0200},
title = {Modelling Risk and Identifying Countermeasure in Organizations},
url = {http://dx.doi.org/10.1007/11962977_5},
year = 2006
}