Divide and Conquer – Towards a Notion of Risk Model Encapsulation

Abstract

Abstract. The criticality of risk management is evident when considering the information society of today, and the emergence of Future Internet technologies such as Cloud services. Information systems and services become ever more complex, heterogeneous, dynamic and interoperable, and many different stakeholders increasingly rely on their availability and protection. Managing risks in such a setting is extremely challenging, and existing methods and techniques are often inadequate. A main difficulty is that the overall risk picture becomes too complex to understand without methodic and systematic techniques for how to decompose a large scale risk analysis into smaller parts. In this chapter we introduce a notion of risk model encapsulation to address this challenge. Encapsulation facilitates compositional risk analysis by hiding internal details of a risk model. This is achieved by defining a risk model interface that contains all and only the information that is needed for composing the individual risk models to derive the overall risk picture. The interface takes into account possible dependencies between the risk models. We outline a method for compositional risk analysis, and demonstrate the approach by using an example on information security from the petroleum industry.

A Model-Based Approach to Support Safety-Related Decisions in the Petroleum Domain

“…The approach is applied to a case study in the petroleum domain. The authors of [10] introduce an approach for compositional risk modeling, through a notion of risk model encapsulation, for which internal details of a risk model are hidden. This is achieved by defining a risk model interface that contains all and only the information that is needed for composing the individual risk models to derive the overall risk picture.…”

Towards Safety Risk Assessment of Socio-Technical Systems via Failure Logic Analysis

“…In this section, we present (as done in [17]) a simplified subsystem that will be used to illustrate our modelling and analysis approach. This subsystem concerns work permits and is part of an overall barrier function to prevent safety incidents such as ignition of hydrocarbons.…”