No abstract

No abstract

No abstract

This paper presents a generic model for information security implementation in organizations. The model presented here is part of an ongoing research stream related to critical infrastructure protection and insider threat and attack analysis. This paper discusses the information security implementation case.

This article discusses the critical infrastructure protection decision support system (CIPDSS), a risk‐informed decision support system that provides insights into making critical infrastructure protection decisions by considering all critical infrastructures and their primary interdependencies. CIPDSS is a suite of simulation models that provide high‐level aggregate functional representation of critical infrastructures and their primary interactions. CIPDSS is also a set of software, analysis procedures, and decision support tools that are designed to provide insight into disruption scenarios by first estimating consequences and subsequently evaluating potential mitigation alternatives. A decision modeling process presents the simulation results in a risk‐informed framework to indicate decision preferences over the modeled alternatives. Even though CIPDSS is not asset specific, it is appropriate for initial overview studies or as a screening tool for higher resolution models. Three CIPDSS applications of threat scenarios are presented: a bomb threat to telecommunications, a contagious disease threat, and a chemical threat from an accidental release of a toxic industrial chemical.