A modular approach to the modelling and analysis of risk scenarios with mutual depenencies

This report describes a modular approach to the modelling and analysis of risk scenarios with mutual dependencies. The presented approach may be used to deduce the risk-level of an overall system from previous risk analyses of its constituent systems. It may also be used to decompose the analysis of a complex system into separate parts that can be carried out independently.

A custom made assumption-guarantee style is put forward as a means to describe risk scenarios with external dependencies. The assumption-guarantee style is built on top of the CORAS risk modelling language. The report also presents a set of deduction rules to facilitate various kinds of reasoning, including the analysis of mutual dependencies between risk scenarios expressed in the assumption-guarantee style.

Oppdragsgiver: Norges Forskningsråd / The Research Council of Norway