NDLI: The Unexpected Value of Hybrid RMS Risk Management

Content Provider	IEEE Xplore Digital Library
Author	Goeres, R.P.
Copyright Year	2006
Abstract	The number of Boxing Day Tsunami victims could have been dramatically reduced had there been an emergency warning system in the countries bordering the Indian Ocean; the lack of such a system was due to cost-benefit analyses that set threat-mitigation resource-allocation priorities. Virtually all quantitative threat assessment and risk management programs use arithmetic means and expected values for analysis and resource prioritization and allocation. Although these methods work reasonably well around the centers of distributions, they underestimate the resources necessary to address threats from the tails of the distributions such as rare-but-deadly threats and ubiquitous-but-innocuous events; they also tend to over-allocate resources to relatively low-threat and low-impact risks. A cursory survey of current quantitative threat assessment and mitigation methodologies explains why their results may be inappropriate and how root-mean-square (RMS) methods for aggregating n-dimensional threat and impact components into effective risk levels (ERL) yields results that correspond to expectations for risk management and resource-allocation purposes. Motivations and procedures for deriving continuous threat-factor functions are described and integrated into these hybrid RMS (HRMS) aggregation techniques, which may be used to construct security return-on-investment (SROI) metrics for budget justification. These methods are also extensible to uncertain-programming applications (e.g. fuzzy logic) and reconciling differences of opinions among information security experts. When combined with operations research techniques such as multidimensional scaling, these methods may form the basis for developing the Emergent Standard Information Assurance Assessor
Sponsorship	IEEE Lexington Sect., USA IEEE Aerospace and Electron. Syst. Soc., USA Chung Shan Instit. of Sci., Nat. Central Univ., Taiwan, ROC
Starting Page	216
Ending Page	220
File Size	5940418
Page Count	5
File Format	PDF
ISBN	1424401747
DOI	10.1109/CCST.2006.313453
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2006-10-16
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Risk management Information security Tsunami Alarm systems Oceans Cost benefit analysis Arithmetic Risk analysis Resource management Probability distribution
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Risk Analysis of Water Resource Based on Possibility-probability Distribution

Security attribute evaluation method: a cost-benefit approach

Research on Time Period Characteristics of Information Communication Model of Unexpected Public Crisis

Early warning monitoring and management of disasters

A Cost-Benefit Analysis of the Seoul OPEN System: Policy Lessons for Electronic Government Projects

Risk-based cost-benefit analysis for security assessment problems

Cost/benefit analysis for video security systems

Methods for information system project selection: an experimental study of AHP and SMART

Considering extreme outage events in cost-benefit analysis of distribution systems

The Unexpected Value of Hybrid RMS Risk Management

Similar Documents

Risk Analysis of Water Resource Based on Possibility-probability Distribution

Security attribute evaluation method: a cost-benefit approach

Research on Time Period Characteristics of Information Communication Model of Unexpected Public Crisis

Early warning monitoring and management of disasters

A Cost-Benefit Analysis of the Seoul OPEN System: Policy Lessons for Electronic Government Projects

Risk-based cost-benefit analysis for security assessment problems

Cost/benefit analysis for video security systems

Methods for information system project selection: an experimental study of AHP and SMART

Considering extreme outage events in cost-benefit analysis of distribution systems

The Unexpected Value of Hybrid RMS Risk Management