The article presents a case study of a web based application for urban security and safety enhancement. The application guides the user through a risk management process consistent with the international standard ISO 31000 and was originally developed in the EU project BESECURE for the management of improvement processes of urban quarters. The table-top assessment case study of the application to major football events is based on regulations and an existing and operational risk management documentation of a major German town. First, it is shown how external and internal contexts are defined, i.e. who stakeholders are and which objectives they peruse. Step by step, the risk management process is conducted for the iterative identification, evaluation and treatment of risks on the objectives in the context of football events. For each step, the main contents identified are discussed as well as the pros and cons of main features of the approach, including interactive and incremental completion, scalability to available analysis time and effort, compliance with a minimum and sufficient set of logic relations, e.g. relating stakeholders to objectives, etc., enabling the user to benefit from former case studies and the provision of a documentation and communication framework. Finally, the overall software-supported risk management process is critically evaluated with respect to efficiency and new insights obtained. In particular, it is shown that the tool support facilitates to conduct risk management as well as going systematically beyond minimum legal risk reduction requirements

For practical application to critical infrastructure, lifelines as well as safety and security relevant and critical technical systems by now analytical risk analysis schemes are standard. However, because of an ever increasing threat landscape and system complexity and connectivity, also an increasing need is emerging to systematically and analytically support the management of potential disruptive (known and unknown) events employing concepts of resilience management, analysis and response. The paper presents a fast analytical resilience assessment approach that takes account of important resilience management and analysis dimensions, including but not limited to, technical resilience capabilities (sensing / monitoring, modelling / rep-resenting, inferring / decision making, acting / implementing and adapting / learning), resilience properties (e.g. robustness, redundancy, resourcefulness, rapidity) and resilience management domains (physical, technical, information, organisational, social, economic). The approach employs a fast chance or risk assessment of these resilience dimensions of the systems under investigation. Thus traditional risk management and analysis approaches are enhanced to cover general system resilience properties instead of scenario specific risks. The nested approach is presented with diagrams along with tables for practical applications