Abstract: A qualitative analysis of observation protocols and audio recordings from 14 crisis response exercises has been conducted revealing eight themes reoccurring in multi-disciplinary team discussions about crisis response to large disruptions to the card payment system. The themes were: Coordinate and collaborate, Payment options, Cash circulation, Fuel and transportation, Security, Inform, communicate and the media, Hoarding and rationing, and Vulnerable groups. The analysis suggest that Swedish society is vulnerable to disruptions in the card payment services, largely due to a low diversity in payment options, the lack of prepared back up solutions for payment, and insufficient cash flows to support a cash only scenario. A longer (several days) disruption in the card payment system will demand coordinating mechanisms for information management, available payment options, and preparedness for rapid establishment of cash flows. Today, these mechanisms do not exist. Simulation exercises with stake-holders are an important mean for increasing awareness about these vulnerabilities and the challenges associated with coping with them.

Abstract: Increased information access and more intelligent information systems enable more operators in an organization to autonomously make decisions. These delegated decision-making opportunities play an important role during critical events, as operators -such as emergency teams and responders- can work independently and rely less on a centralized decision-making structure. Moreover, the operators' perceived level of trust increases while also limiting the coordinators' perceived control. In this paper, we examine the influence of such systems on the shift in perceived control and empowerment for both operators and commanders. In our experiments, conducted at the Royal Netherlands Air Force, we found that the introduction of these systems indeed affects perceived control and empowerment, specifically as perceived by the coordinator. These factors will play an important role in the effective use of such systems and their transformative effect on an organization. Especially considering the ongoing technical and organizational developments in crisis information management.

Abstract: In emergency response, parallel working coordination groups and command and control centres are responsible to deal with complex events. A well-functioning exchange of information between organizations, officials and these coordination groups is the basis for an efficient risk management. This paper describes a methodical ap-proach for field observation to understand and improve the inter-organizational information management be-tween the involved partners. The method was tested within a practical approach and possible occurring problems during the observation were identified and solutions for these problems are provided.

Abstract: In today's globalized world and with the extensive use of social media, there is a high connectivity of people across countries, which can be a helpful potential in disaster response. In a coordinated manner, spontaneous volunteers from neighbouring nations can provide high manpower and resources to a disaster affected area. In this article, we discuss why the consideration of spontaneous volunteers is relevant in a cross-border context in order to improve disaster resilience for borderlands. Furthermore, we introduce a baseline agent-based model to simulate cooperation procedures for the involvement of spontaneous volunteers to the official crisis response in a borderland and discuss important issues that need to be addressed in future considerations.

Abstract: Small island developing states (SIDs) face a range of underlying issues that increase their vulnerability and risk to disaster. This commonly results in a lack of available, reliable and actionable data for both island nations as well as their insular communities. Simultaneously, issues such as climate change make their riskscapes unique and challenging to mitigate, forcing the need to find methods of improving community resiliency. This paper uses qualitative interviews conducted in the post-disaster phase of the 2017 Atlantic hurricane season to highlight the main issues experienced by communities. It then uses these, as well as literature guidance, to create a Lessons Learnt Framework (LLF) designed to challenge underlying assumptions, assess management efforts, discuss and record community experiences, and to feedback social capital into vulnerable communities to support future community resilience.

Abstract: Resilience is understood as the ability of a system, community or society exposed to hazards to resist, absorb, accommodate, adapt to, transform and recover from the effects of a hazard in a timely and efficient manner. So far, dozens of measurement instruments have been developed to measure community resilience to disasters, considering each one different types of hazards (general, natural, climate, man-made, etc.) and communities (general, urban, rural, etc.). However, none of these instruments has been widely adopted yet. In this context, we discuss important gaps for resilience research and practice. Then, we propose a conceptual framework to review community resilience instruments, so to enhance their improvement through two facets (or dimensions) we propose of customization and integration. This framework is characterized by the following properties for community resilience instruments: encapsulation, intelligibility, geographical focus, hazard range focus, connectivity, adaptability to dynamic conditions, datification, and stakeholders' involvement. We look forward to apply this framework to review a purposive sample of community resilience instruments regarding natural disasters.

Abstract: The article presents first research-in-progress results of an initial assessment of the IT-security awareness of five exemplary German-language emergency-alert apps. Emergency-alert mobile applications became part of many modular-oriented warning systems around the globe. Warning and intended population behavior relies on trust upon the integrity of any warning institution, be it governmental or private. IT-security is crucial in order not to undermine trust. Emergency apps do not fit into the typical entertainment purpose of mobile applications, and we show that their primarily focus on keeping the user safe from harm can cause a conflict of interest about distribution of scarce technical resources on a mobile device, which may again endanger IT-Security. We therefore promote a better integration and standardization of disaster management functionality on the operating system layer.

Abstract: Crises are infrequent, unpredictable and complex events. Managing such events requires well-prepared and well-coordinated efforts by several response organizations. Hence, a sufficient inter-organizational crisis management (ICM) capability is critical for sustainable societies. To ensure the ICM capability, approaches for enhancing and evaluating it are needed. The objective of this study was to identify and elaborate a clearly defined set of capabilities that constitutes ICM capability. The study was performed by an explorative literature study, where identified capabilities related to ICM were clustered. The cluster of capabilities was iteratively evaluated and refined. The study resulted in 14 capabilities that constitute ICM capability, which were divided into core, supportive, and enabling capabilities. The set of capabilities may provide a foundation for a framework of ICM capability with the ability to support assessment of ICM performance both in exercises and in real ICM operations, as well as in the design of ICM exercises.

Abstract: Models are important means to represent, explore, evaluate, and develop systems, such as interorganizational crisis management (ICM) systems. The objective was to explore how ICM systems are represented in the scientific literature, i.e., how ICM systems are modelled. The study was carried out as a systematic literature review. The results are presented as (1) organizational descriptions or models of ICM systems, (2) functional components of ICM systems, (3) analytical approaches used to model ICM systems, and (4) changes of ICM systems. The results revealed that ICM systems are described in various ways, and that descriptions of models are rather based on entities developed by the authors of the publications than on a common framework for describing ICM systems. The identified information on models, functional components, analytical approaches, and changes of the ICM systems provide important input to future work, e.g. comparing different models to determine their strengths and weaknesses.

Abstract: In 2017, Estonia experienced a cyber crisis caused by a vulnerability found in the smart card chips produced by Infineon Technologies AG. Since the affected chip was used in the electronic identity card (ID card) issued by the State to more than half of the Estonian population, the vulnerability posed a risk to the resilience of Estonian e-state and thus quickly escalated into a manageable crisis. This work studies to what extent, in such a national emergency, the involved parties were able to precisely follow the applicable laws and regulations in the field. We enlist the cases where the requirements were not fully followed, either due to the lack of technical preparedness, suboptimal decisions made under heavy time pressure, or the critical nature of the situation.

Abstract: Social media is emerging as a communication tool for successfully managing disasters. However, studies have shown that not all individuals are equally predisposed towards effectively using social media for disaster management. There still exists a big digital divide when it comes to using social media for disaster management. Drawing on situational theory of problem solving, we develop a conceptual model that examines the motivating factors for the underserved communities to use social media for disaster management. We further develop and cross-validate a questionnaire instrument to acilitate empirical research. We thus offer an empirical context for motivating individuals from underserved communities to use social media effectively during disasters.

Abstract: Common operational picture (COP) map-based interfaces display operational information to support integration of emergency responders. Such interfaces integrate different subsystems and present the resulting information into an overview for enabling situation awareness. Literature shows that they are often developed from non-user-centric perspectives and are defined in technological terms that are not adequately capturing the users' needs. Therefore, the aim of this particular work in progress is to get insight into the features and the role of COP map-based interfaces currently being used in Norway to (1) examine their content, functionality, and design; and (2) to understand how such displays are incorporated into the service context. This study structures the knowledge on map displays that constitute part of the COP services. Using workshop and interviews with the developers and users of existing COP map services, we identify requirements for a common operational symbology and common operational functionality to improve such map services and make them interoperable.

Abstract: Critical energy infrastructures are more and more focused upon by politics and society. Modern society depends on these structures, since they enable the steady support of electricity and other types of energy. Deliberately precipitated hazards of certain critical parts of electrical transmission systems (ETS) can lead to catastrophic consequences. Therefore, the analysis of feasible security hazards and resulting consequences for the operation of transmission systems are a concern to transmission system operators (TSO). Alas, there is no common method available that comprehensively identifies these feasible security related scenarios and classifies them according to their overall criticality for the safe operation of the ETS. To tackle this challenge, we propose a comprehensive, yet easy-to-apply method to systematically identify and assess the criticality of security threat scenarios. It is conducted in four steps and consists of a matrix based consistency check of threat scenarios in a defined solution space and a convenient semi-quantitative assessment of a risk factor for the ETS. The approach is illustrated by the simplified generic example of an EETS.