Til hovedinnhold
Norsk English

Managing emerging information security risks during transitions to Integrated Operations

Sammendrag

The Norwegian Oil and Gas Industry is adopting new information communication technology to connect its offshore platforms, onshore control centers and the suppliers. The management of the oil companies is generally aware of the increasing risks associated with the transition, but so far, investment in incident response (IR) capability has not been highly prioritized because of uncertainty related to risks and the present reactive mental model for security risk management. In this paper, we extend previous system dynamics models on operation transition and change of vulnerability, investigating the role of IR capability in controlling the severity of incidents. The model simulation shows that a reactive approach to security risk management might trap the organization in low IR capability and lead to severe incidents. With a long-term view, proactive investment in IR capability is of financial benefit.

Kategori

Vitenskapelig Kapittel/Artikkel/Konferanseartikkel

Språk

Engelsk

Forfatter(e)

Institusjon(er)

  • Universitetet i Agder
  • City University of Hong Kong
  • SINTEF Digital / Software Engineering, Safety and Security
  • Norges teknisk-naturvitenskapelige universitet
  • SINTEF Digital

År

2010

Forlag

IEEE

Bok

43rd Hawaii International Conference on System Sciences (HICSS), Koloa, Kauai, Hawaii, January 5-8, 2010

ISBN

9780769538693

Side(r)

1 - 11

Vis denne publikasjonen hos Cristin