|
Eelco Vriezekolk, Roel Wieringa, & Sandro Etalle. (2012). Design and initial validation ofthe Rastermethod for telecom service availability risk assessment. In Z.Franco J. R. L. Rothkrantz (Ed.), ISCRAM 2012 Conference Proceedings – 9th International Conference on Information Systems for Crisis Response and Management. Vancouver, BC: Simon Fraser University.
Abstract: Crisis organisations depend on telecommunication services; unavailability of these services reduces the effectiveness of crisis response. Crisis organisations should therefore be aware of availability risks, and need a suitable risk assessment method. Such a method needs to be aware of the exceptional circumstances in which crisis organisations operate, and of the commercial structure of modern telecom services. We found that existing risk assessment methods are unsuitable for this problem domain. Hence, crisis organisations do not perform any risk assessment, trust their supplier, or rely on service level agreements, which are not meaningful during crisis situations. We have therefore developed a new risk assessment method, which we call RASTER. We have tested RASTER using a case study at the crisis organisation of a government agency, and improved the method based on the analysis of case results. Our initial validation suggests that the method can yield practical results. © 2012 ISCRAM.
|
|
|
Eelco Vriezekolk, Roel Wieringa, & Sandro Etalle. (2011). A new method to assess telecom service availability risks. In E. Portela L. S. M.A. Santos (Ed.), 8th International Conference on Information Systems for Crisis Response and Management: From Early-Warning Systems to Preparedness and Training, ISCRAM 2011. Lisbon: Information Systems for Crisis Response and Management, ISCRAM.
Abstract: Protection of society against natural and man-made disasters is high on the societal and political agenda. Effective crisis management is more important than ever. Nowadays, crisis organisations depend crucially on reliable telecom services, and unexpected failure of telecommunication may have serious consequences. In order not to be caught unprepared, crisis organisations should therefore perform a risk assessment on telecom availability. Unfortunately, assessment of availability risks of modern, multi-operator telecom services is difficult; information sources are unreliable, and the relevant information is uncertain and difficult to obtain. This paper describes some of these difficulties, as well as the requirements of availability risk assessment methods for crisis telecommunication services. The paper outlines a new method that can be applied without requiring full knowledge of the physical layout of the telecom infrastructure. This new method relies on telecom service diagrams as a tool for risk analysis and to facilitate dialogue among the analysts.
|
|
|
Eelco Vriezekolk, Sandro Etalle, & Roel Wieringa. (2015). Validating the Raster Risk Assessment Method in Practice. In L. Palen, M. Buscher, T. Comes, & A. Hughes (Eds.), ISCRAM 2015 Conference Proceedings ? 12th International Conference on Information Systems for Crisis Response and Management. Kristiansand, Norway: University of Agder (UiA).
Abstract: Telecommunication services are essential to modern information systems, especially so for crisis management. Telecoms systems are complex and difficult to analyse. Current risk assessment methods are either not used because of their complexity, or lack rigorous argumentation to justify their results because they are oversimplified. Our challenge has been to develop a risk assessment method that is both usable in practice and delivers understandable arguments to explain and justify its risk evaluations. After experiments to validate the method in laboratory environments, we now present the first results from successful application with practitioners in a regional crisis organization that provides evidence about the practical usability of the method.
|
|
|
Hans C.A. Wienen, Faiza A. Bukhsh, Eelco Vriezekolk, & Roel J. Wieringa. (2019). Applying Generic AcciMap to a DDOS Attack on a Western-European Telecom Operator. In Z. Franco, J. J. González, & J. H. Canós (Eds.), Proceedings of the 16th International Conference on Information Systems for Crisis Response And Management. Valencia, Spain: Iscram.
Abstract: After a large incident on a telecommunications network, the operator typically executes an incident analysis to
prevent future incidents. Research suggests that these analyses are done ad hoc, without a structured approach. In
this paper, we conduct an investigation of a large incident according to the AcciMap method. We find that this
method can be applied to telecommunications networks with a few small changes; we find that such a structured
approach yields many more actionable recommendations than a more focused approach and we find that both the
onset of an incident and the resolution phase merit their own analysis. We also find that such an analysis costs a
lot of effort and we propose a more efficient approach to using this method. An unexpected outcome was that
AcciMap may also be very useful for analyzing crisis organizations.
|
|
|
Hans Christian Augustijn Wienen, Faiza Allah Bukhsh, Eelco Vriezekolk, & Roel J. Wieringa. (2018). Accident Analysis Methods and Models – a Systematic Review. In Kees Boersma, & Brian Tomaszeski (Eds.), ISCRAM 2018 Conference Proceedings – 15th International Conference on Information Systems for Crisis Response and Management (pp. 398–408). Rochester, NY (USA): Rochester Institute of Technology.
Abstract: After a risk has manifested itself and has led to an accident, valuable lessons can be learned that can be taken into account to reduce the risk of a similar accident occurring again. This calls for accident analysis methods. In the past 20 years a large number of accident analysis methods have been proposed and it is difficult to find the right method to apply in a specific circumstance. We conducted a review of the state of the art of accident analysis methods and models across domains. We classify the models using the well-known categorization into sequential, epidemiological and systemic methods. We find that these classes have their own characteristics in terms of speed of application versus pay-off. For optimum risk reduction, methods that take organizational issues into account can add valuable information to the risk management process in an organization.
|
|