Security for critical infrastructure and the vulnerability analysis of urban areas is a topic of growing interest. Reasons for this are a growing urbanization and an increasing number of new hazard scenarios. More and more people are living in urban areas and this trend is set to continue. When faced with the increasing hazards, like global terrorism or natural disasters for example, it is essential to consider these exceptional scenarios in the context of safety and security research. Therefore, it is the aim to integrate protection design as an inherent part of building development and urban planning. In a first step, a decisive scenario as assessment basis has to be defined to evaluate urban areas or single buildings. This is essential to build a basis for a schematic hazard and risk analysis. In this paper, the results of an empirical event analysis are presented. Within this work security critical events are evaluated using the ”Terrorist Event Database". The results build the basis for the empirical evaluation and pursuing quantitative risk analyses for safety critical scenarios

The article presents a case study of a web based application for urban security and safety enhancement. The application guides the user through a risk management process consistent with the international standard ISO 31000 and was originally developed in the EU project BESECURE for the management of improvement processes of urban quarters. The table-top assessment case study of the application to major football events is based on regulations and an existing and operational risk management documentation of a major German town. First, it is shown how external and internal contexts are defined, i.e. who stakeholders are and which objectives they peruse. Step by step, the risk management process is conducted for the iterative identification, evaluation and treatment of risks on the objectives in the context of football events. For each step, the main contents identified are discussed as well as the pros and cons of main features of the approach, including interactive and incremental completion, scalability to available analysis time and effort, compliance with a minimum and sufficient set of logic relations, e.g. relating stakeholders to objectives, etc., enabling the user to benefit from former case studies and the provision of a documentation and communication framework. Finally, the overall software-supported risk management process is critically evaluated with respect to efficiency and new insights obtained. In particular, it is shown that the tool support facilitates to conduct risk management as well as going systematically beyond minimum legal risk reduction requirements

The five-step risk management scheme of ISO 31000 or similar schemes have been applied to very diverse domains including logistics, health care, aviation, construction, defense, finance and security. We show that the risk management process of ISO 31000 can be modeled with the semi-formal Systems Modeling Language (SysML). We model requirements and process described in ISO 31000. We present how selected SysML diagrams are employed, namely the use case diagram, activity diagram and requirement diagram. We select a minimum set of well-known methods for fulfilling the requirements of the risk management process for hazard risks as well as for opportunity risks. We use examples mainly in the urban security domain for illustration of the risk/opportunity management process. In addition, we indicate how to use the risk management scheme for modeling the monitoring of the evolution of risks and chances as well as for modeling an early warning system, e.g. during the application of recommended counter actions and actions, respectively

No abstract

No abstract