Abstract: The aim of this work is defining fundamental principles of an Internal Security System in the presence of intentional risks in Public Administration. The relevance of this object of study has increased even more with the emergence of new terrorist groups and the proliferation of organized crime, which have been categorized as a maximum threat to Security by the government. This context has led to new regulations and legislation on Security matters at the national and international level to protect assets, people and the activity of the Administration itself. Despite the large number of regulations and relevance of this topic, there is not any study which defines in a comprehensive manner the requirements that a security system must have in the presence of intentional risks in Public Administration. The results of this work are intended to be a reference for the Public Administration, for the prevention and reaction to damage to people, property, and operation, intentionally caused by external agents, personnel themselves or users. These principles have been applied and validated through a Delphi process in the Administration of the Regional Government of Andalusia in which more than 40 security-related managers have participated.

Abstract: Improving disaster operations requires understanding and managing risk. This paper proposes a new data-driven approach for measuring the risk associated with a natural hazard, in support of developing more effective approaches for managing disaster operations. The paper focuses, in particular, on the issue of defining the inherent severity of a hazard event, independent of its impacts on human society, and concentrates on hurricanes as a specific type of natural hazard. After proposing a preliminary severity measure in the context of a hurricane, the paper discusses the issues associated with collecting empirical data to support its implementation. The approach is then illustrated by comparing the relative risk associated with two different locations in the state of North Carolina subject to the impacts of Hurricane Florence in 2018.

Abstract: Autonomous systems are being exceedingly used to assist humans in various crisis responses scenarios such as earthquakes and nuclear disasters. Because they operate in highly unstructured and uncertain environments, failures are an inherent part of such autonomous systems, and, techniques for making these systems robust to failures arising from computer hardware, software or communication malfunctions are already integrated into their design. However, an important aspect while designing such systems is often times overlooked: how to better coordinate and communicate across distributed, possibly diverse human teams who are working in cooperation with autonomous systems into the design of the autonomous system itself. Unfortunately, this results in limited adoption of autonomous systems in real-life crisis scenarios. In this working paper, we describe ongoing work that attempts to address this deficit by integrating research on shared mental models between humans with techniques for autonomous agent team formation in the context of search and rescue scenarios.

Abstract: Disaster response operations require communication and coordination between agencies that seldom occurs in everyday workday situations. Furthermore, in such hybrid environments it is necessary to establish a common operational picture for the responders involved to support collaborative decision-making. The emergency responders must gain situational awareness, and this can further affect the quality of how they deal with the situation. Training in emergency situations is shown to be efficient for learning. In order to understand the complexity of working in unpredictable environments, an analysis of an audio-log from a large-scale drill was carried out. Moreover, this paper provides a definition of several categories for identifying the processes to establish situational awareness and a common operational picture among emergency responders. The analysis process revealed how the actors communicate and revealed an overall communication pattern.

Abstract: After a large incident on a telecommunications network, the operator typically executes an incident analysis to
prevent future incidents. Research suggests that these analyses are done ad hoc, without a structured approach. In
this paper, we conduct an investigation of a large incident according to the AcciMap method. We find that this
method can be applied to telecommunications networks with a few small changes; we find that such a structured
approach yields many more actionable recommendations than a more focused approach and we find that both the
onset of an incident and the resolution phase merit their own analysis. We also find that such an analysis costs a
lot of effort and we propose a more efficient approach to using this method. An unexpected outcome was that
AcciMap may also be very useful for analyzing crisis organizations.

Abstract: Critical infrastructures (CIs) increase in complexity due to numerous dependencies on other CIs but also due to the ongoing digitalization in the industry sector. This yields an increased risk of failure of a single CI as the overall systems gets very fragile and sensitive to errors Failure of a single component may affect large parts of an infrastructure due to cascading effects. One way to support functionality of a CI is the use of Industrial Control Systems (ICS) that allow monitoring remote sites and controlling processes. However, this is an additional source for threats as recent cyber-attacks have shown. Further, the additional information for such cyber systems is often not efficiently combined with existing information on the physical infrastructure. We here propose a method to combine these two sources of information in order to estimate the impact of a security incident on CIs, taking into account cascading effects of threats. An implementation of the model allows simulation of the dynamics inside a CI and yields a record of the status of each asset of the CI. The way the assets change their states illustrates the consequences of an incident on the entire CI. Visualization of the results provides an overview on the situation of the entire CI at a certain point of time and a sequence of such visualization over an entire period of time illustrates the changes over time. The results from this analysis may be used to support security officers in analyzing the current (hybrid) state of their CI in case of an incident and thus increase the hybrid situational awareness.

Abstract: After large-scale disasters, diverse partner agencies rely heavily on an information-sharing environment that supports collaborative work. In the U.S., this occurs under the Incident Command System (ICS), a structured organizational framework for coordinated action. We explore obstacles to information sharing and coordinationobserved at a county-level Emergency Operations Center (EOC) operating under ICS during the response phase of a large-scale regional disaster exercise. Textual observations collected in situ are analyzed for both the effect/manifestation and cause/source of barriers to information sharing. Two-thirds of barriers that manifest as computational issues are not caused by technology breakdowns, and a third caused by unclear processes manifest as computational issues. Overall, obstacles to collaborative work that appear to be related to computational issues are generally attributable to non-technical causes. This indicates that resources directed at improving collaborative management of disasters by enhancing technological capabilities are likely to be misdirected.

Abstract: The importance of community resilience has become increasingly recognized in emergency management and
post-disaster community well-being. To this end, three seismic resilience planning initiatives have been
conducted in the U.S. in the last decade to envision the current state of community resilience. Experts who
participated in these initiatives confronted challenges that must be addressed for future planning initiatives.
We interviewed eighteen participants to learn about the community resilience planning process, its
characteristics, and challenges. Conducting qualitative content analysis, we identify six main challenges to
community resilience planning: complex network systems; interdependencies among built environment systems;
inter-organizational collaboration; connections between the built environment and social systems;
communications between built environment and social institutions? experts; and communication among
decision-makers, social stakeholders, and community members. To overcome the identified challenges, we
discuss the capability of human-centered simulation modeling as a combination of simulation modeling and
human-centered design to facilitate community resilience planning.

Abstract: In rapid-onset disasters the time needed for evacuation is crucial. Aside from the behaviour of the population, the
road network plays a fundamental role. It serves as a medium to reach a safe area. This study analyses the entire
evacuation process, from decision-making up to the arrival at an evacuation zone by combining standardised
questionnaires and GIS-based simulation. Based on a case study in the Chilean community of Talcahuano, an
event-based past scenario and a hypothetical future scenario is investigated, integrating the affected population in
the research process. The main problem identified in past evacuations has been time delay due to congestions,
which also is evident in the results of the hypothetical future scenario. A result which supports evacuation by foot.
This paper argues that a combination of scientific methods is essential for analysing evacuation and to reduce the
risk due to time delay, critical route and transport medium choice.

Abstract: This paper presents a study where nine Swedish citizens were interviewed about their concerns and expectations, from a customer perspective, in relation to a 10 day disruption in the payment system. The purpose of the study was to understand the customer?s perspective in order to provide input to the development of a simulation environment. This simulation environment aims at allowing different stakeholders to experience how a disruption in the payment system affects the local community and thereby create understanding of how resilience is built and affected. The research questions were: What do customers expect to get access to? When? What are customers prepared for? How does this differ among different customer groups? The results indicate some understanding of how such a crisis affects the local community and what the informants expects to happen. The respondents represented a diversity of socio-economic backgrounds from rural and urban parts of the municipality.

Abstract: With the increase of terrorist attacks and spreading extremism worldwide, countermeasures advance as well. Often
social media is used for recruitment and radicalization of susceptible target groups. Counter narratives are trying
to disclose the illusion created by radical and extremist groups through a purposive and educational counter
statement, and to initiate a rethinking in the affected individuals via thought-provoking impulses and advice. This
exploratory study investigates counter narrative campaigns with regard to their fight and prevention against
terrorism in social media. Posts with strong emotions and a personal reference to affected individuals achieved
the highest impact and most reactions from the target group. Furthermore, our results illustrate that the impact of
a counter narrative campaign cannot be measured solely according to the reaction rate to their postings and that
further analysis steps are therefore necessary for the final evaluation of the campaigns.

Abstract: Black markets that develop after disaster events have potential to disrupt recovery efforts, and the Dark Web is the perfect facilitator of these markets. Lack of knowledge about the Dark Web: how to access it, how to safely, efficiently navigate the space, and prevailing myths about its dangers likely lead to this deficiency of research. To date, this area is a critically unexplored area of the Internet in the crisis research literature. This work examines this area of the Internet for utility and insight relevant to crisis managers. A pilot study on Puerto Rico in the months following Hurricane Maria reveals possible indicators of the development of black markets for prescription drugs, food, and water, which can impact long-term recovery and reconstruction efforts when these items are diverted from legal supply chains. As more people adopt this hidden part of the Internet, researchers and managers must do more to pay attention to activities that occur in this space.