To main content

Managing emerging information security risks during transitions to Integrated Operations

Abstract

The Norwegian Oil and Gas Industry is adopting new information communication technology to connect its offshore platforms, onshore control centers and the suppliers. The management of the oil companies is generally aware of the increasing risks associated with the transition, but so far, investment in incident response (IR) capability has not been highly prioritized because of uncertainty related to risks and the present reactive mental model for security risk management. In this paper, we extend previous system dynamics models on operation transition and change of vulnerability, investigating the role of IR capability in controlling the severity of incidents. The model simulation shows that a reactive approach to security risk management might trap the organization in low IR capability and lead to severe incidents. With a long-term view, proactive investment in IR capability is of financial benefit.

Category

Academic chapter/article/Conference paper

Language

English

Author(s)

Affiliation

  • University of Agder
  • City University of Hong Kong
  • SINTEF Digital / Software Engineering, Safety and Security
  • Norwegian University of Science and Technology
  • SINTEF Digital

Year

2010

Publisher

IEEE (Institute of Electrical and Electronics Engineers)

Book

43rd Hawaii International Conference on System Sciences (HICSS), Koloa, Kauai, Hawaii, January 5-8, 2010

ISBN

9780769538693

Page(s)

1 - 11

View this publication at Cristin