Title: Assessing the risk reducing effect of measures against intelligent attacks: review and discussion of some common approaches

Authors: Tore Askeland; Roger Flage; Seth D. Guikema

Addresses: University of Stavanger, P.O. Box 8600 Forus, N-4036 Stavanger, Norway ' University of Stavanger, P.O. Box 8600 Forus, N-4036 Stavanger, Norway ' Department of Industrial and Operations Engineering, University of Michigan, 1205 Beal Ave., Ann Arbor, MI 48109, USA

Abstract: It is well-established that there is a fundamental phenomenological distinction between intentional events and non-intentional events. Different approaches have been proposed for assessing risk from intentional events, including a conditional screening approach ignoring the probability of attack, probabilistic risk analysis, game theoretic modelling, and a semi-quantitative approach highlighting the knowledge dimension and surprises. In the present paper, we review and compare these four approaches in terms of how they assess the effect of risk reducing measures. The potential theft of paintings from an art museum is used as an illustrating example. The comparison illustrates how the different fundamental assumptions underlying these approaches influence the baseline conclusions made regarding risk reducing measures. A scheme for assessing assumptions and their justification is suggested, linked to the semi-quantitative approach and showing how this approach can contribute to the structuring and evaluation of the decision basis provided by the other approaches.

Keywords: intelligent adversarial risk assessment; game theory; probabilistic risk assessment; PRA; strength of knowledge; SoK.

DOI: 10.1504/IJBCRM.2021.113947

International Journal of Business Continuity and Risk Management, 2021 Vol.11 No.1, pp.25 - 51

Received: 12 Apr 2019
Accepted: 19 Jan 2020
Published online: 05 Apr 2021 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article