F.O. Korobeynikov, Ph.D. student
G.E. Pukhov Institute for Modelling in Energy Engineering
National Academy of Sciences of Ukraine
Ukraine, 03164, Kyiv, Str. General Naumov 15
e-mail:
Èlektron. model. 2024, 46(2):35-42
https://doi.org/10.15407/emodel.46.02.035
ABSTRACT
This research presents a three-dimensional risk matrix model designed for the analysis and prioritisation of critical risks in the context of resilience. Traditional risk assessment methods prevalent in information security, which typically juxtapose the likelihood and consequences of risks, are inadequate for fully capturing the intricacies of critical risks. The proposed three-dimensional model addresses these shortcomings by cohesively integrating the dimensions of likelihood, impact and cost of risk management. This integration provides a holistic tool for resilient risk analysis that goes beyond the capabilities of traditional models.
A key feature of this model is its ability to address the complexities associated with critical risks, which are often not adequately addressed by traditional risk matrices due to their stochastic nature and significant potential impact on organisational resilience. By incorporating budgetary constraints into the risk assessment process, the model enables a more objective and quantifiable approach to managing critical risks. It shifts the evaluative focus from a purely probabilistic perspective to a cost-value based assessment, emphasising the balance between potential benefits and mitigation expenditure.
This approach not only refines the accuracy of critical risk assessment, but also enhances existing risk management practices, providing a more robust and strategic tool for managing organisational risk.
KEYWORDS
Risk Management, Resilience, Risk Matrix, Information Security, Critical Risk Analysis, Stochastic HILP Risks.
REFERENCES
- Mokhor, V., Bakalynskyi, O., & Tsurkan, V. (2018). Risk assessment presentation of information security by the risks map. Collection "Information technology and security", 6(2), 94—104.
https://doi.org/10.20535/2411-1031.2018.6.2.153494 - Hobbs, K.L., Lyons, J.B., Feather, M.S., Bycroft, B.P., Phillips, S., Simon, M., Harter, M., Costello, K., Gawdiak, Y., & Paine, S. (2023). Space Trusted Autonomy Readiness Levels. In 2023 IEEE Aerospace Conference. IEEE.
https://doi.org/10.1109/AERO55745.2023.10115976 - Li, Z.P., Yee, Q.M.G., Tan, P.S., & Lee, S.G. (2013). An extended risk matrix approach for supply chain risk assessment. In 2013 IEEE International Conference on Industrial Engineering and Engineering Management (IEEM).
https://doi.org/10.1109/IEEM.2013.6962700 - Vaezi, A., Jones, S., & Asgary, A. (2024). Integrating Resilience into Risk Matrices: A Practical Approach to Risk Assessment with Empirical Analysis. Journal of Risk Analysis and Crisis Response, 13(4).
https://doi.org/10.54560/jracr.v13i4.411 - Korobeynikov F. Resilience Paradigm Development in The Security Domain. Electronic Modeling. 2023. Vol. 45, no. 4. P. 88—111. URL:
https://doi.org/10.15407/emodel.45.04.088