Search results

Consumers increasingly rely on organisations for online services and data storage while these same institutions seek to digitise the information assets they hold to create economic value. Cybersecurity failures arising from malicious or accidental actions can lead to significant reputational and financial loss which organisations must guard against. Despite having some critical weaknesses, qualitative cybersecurity risk analysis is widely used in developing cybersecurity plans. This research explores these weaknesses, considers how quantitative methods might address the constraints and seeks the insights and recommendations of leading cybersecurity practitioners on the use of qualitative and quantitative cyber risk assessment methods.

The study is based upon a literature review and thematic analysis of in-depth qualitative interviews with 16 senior cybersecurity practitioners representing financial services and advisory companies from across the world.

While most organisations continue to rely on qualitative methods for cybersecurity risk assessment, some are also actively using quantitative approaches to enhance their cybersecurity planning efforts. The primary recommendation of this paper is that organisations should adopt both a qualitative and quantitative cyber risk assessment approach.

This work provides the first insight into how senior practitioners are using and combining qualitative and quantitative cybersecurity risk assessment, and highlights the need for in-depth comparisons of these two different approaches.

The purpose of this paper is to review the methods for assessing food safety risk within a food safety plan.

The research involved analysis of both qualitative and quantitative methods of risk assessment.

Risk assessment is a key element of the HACCP approach to food safety. It requires food business operators and those on HACCP teams to determine both the acceptable level of contamination and the risk for the food business, and ultimately the consumer. The choice of food safety risk assessment model is crucial to an organisation. The mechanisms to determine what is acceptable can be a combination of scientific based and value based criteria and utilise qualitative or semi‐quantitative approaches. Whilst fuzzy logic has a place in making risk assessment more quantitative; specific software tools are required to enable quantitative risk assessment especially where what is acceptable at one point could, subject to other factors later in the supply chain, change to an unacceptable level of risk to the consumer. Quantitative mechanisms are required to make these decisions at organisational, or indeed at policy level, fully transparent.

This research is of academic value and of value to policy makers and practitioners in the food supply chain.

Ancient theatres and odea are one of the most significant and creative socio-cultural edutainment centres of human history that are still in use. They stood and served as huge multi-functional structures for social, religious, propaganda and political meeting space. Meanwhile, ancient theatres’ sites have an intrinsic value for all people, and as a vital basis for cultural diversity, social and economic development, they should continue to be a source of information for future generations. Though, all places with ancient theatre heritage should be assessed as to their potential risk from any anthropogenic or natural process. The paper aims to discuss these issues.

The main paper’s objective is to discuss mainly the anthropogenic and technical risks, vulnerability and impact issues on the ancient classical theatres. While elaborating on relevant recent studies, where the authors were involved in ERATO and ATHENA European projects for ancient theatres and odea, this paper provides a brief overview of the main aspects of the anthropogenic qualitative risks and related issues for selected classical antiquity theatres. Some relevant cases are critically presented and investigated in order to examine and clarify the main risk mitigation issues as an essential prerequisite for theatre heritage preservation and its interface with heritage reuse.

Theatre risk mitigation is an ongoing and challenging task. By preventive conservation, theatre anthropogenic qualitative risks’ management can provide a framework for decision making. The needed related guidelines and recommendations that provide a systematic approach for sustainable management and planning in relation mainly to “ancient theatre compatible use” and “theatre technical risks” are analysed and presented. This is based on identification, classification and assessment of the theatre risk causes and contributing factors and their mitigation.

The paper also suggests a new methodological approach for the theatre anthropogenic qualitative risk assessment and mitigation management, and develop some recommendations that provide a systematic approach for theatre site managers and heritage experts to understand, assess, and mitigate risks mainly due to anthropogenic and technical threats.

The purpose of this paper is to identify the risks and methods for their assessment in the case of maintenance activities in Sri Lanka. The main objectives were to identify the occupational risks in maintenance work and the risk assessment methods in place and their drawbacks in the Sri Lankan context.

The identification and assessment of risks were undertaken through a study of three fast-moving consumer products manufacturing organisations. The relevant data were collected through personal interviews and site visits.

Most typical risks associated with maintenance are cuts, slips and falls, with severe or fatal injuries as the result of negligence of SOP and failure to use the PPE. Checklists, brainstorming and decomposition techniques were identified as the preferred methods in maintenance for risk identification while a risk rating matrix is used for risk analysis. Lack of awareness and indifference towards risk assessment; make effective risk assessment very difficult. These drawbacks can be minimised by education, systematic training and enforcing rules, regulations and procedures for controlling risks.

Studies on maintenance worldwide have identified several maintenance-specific risks such as working at heights, the pressure of time, etc. However, there is a dearth of published research on risks and risk assessment methods in maintenance in Sri Lankan context. The findings highlighted the safety risks and risk assessment tools entailed in the maintenance operations of manufacturing organisations. The findings will be useful for those in maintenance operations in managing risks effectively through designing work environments that are risk-free.

The purpose of this paper is to investigate approaches pertaining to qualitative fire risk assessment of existing hotel facilities, for the purpose of identifying and eliminating fire hazards, and meeting requirements of the current legislation.

The paper carries out several research activities, including: identifying the set of factors that render hotel facilities a high‐risk type of facilities in fires; investigating potential high‐risk areas to fires in hotels; exploring the role of hotel managers towards operating safe hotel facilities; discussing the concept of fire risk management, and the role of fire safety inspections as a risk mitigation strategy to ensure the adherence of existing hotels to fire safety legislation; and describing a methodical approach that fire safety inspectors can follow while conducting fire safety inspections. The paper also presents the development of a qualitative fire risk assessment tool, whereby existing hotel facilities can be assessed.

The paper establishes that hotel facilities are a high‐risk type of facilities in fire emergencies due to the combination of several risk factors. The fire risk assessment tool provides 76 items to assess, in seven main divisions, including exits, fire protection systems, electrical, fire doors, hazardous materials, housekeeping and miscellaneous.

This paper provides for a better comprehension of the roles of hotel managers towards operating safe hotel facilities. The paper emphasizes adherence of existing hotels to fire safety legislation to ensure the minimum level of safety for guests in all hotel properties. It serves to enhance the understanding of the potential dangers present in hotel facilities. It is of practical value to hoteliers responsible for the day‐to‐day operation of hotel facilities and for surveyors inspecting such properties.

The purpose of this paper is to present a generic framework to assess and simulate outsourcing risks in the supply chain.

This combination approach involves a qualitative risk analysis methodology termed as the supply chain risk‐failure mode and effect analysis (SCR‐FMEA) which integrates risk identification, analysis and mitigation actions together to evaluate supply chain outsourcing risk. The qualitative risk assessment will allow risk manager to provide a visual presentation of imminent risks using the risk map. Monte Carlo simulation (MCS) on the imminent risks of delivery outsourcing using the Milk‐Run system is adopted.

With basic statistical concepts, key performance variables and the risk of delivery outsourcing are analyzed. It is found that a newly implemented delivery outsourcing arrangement on the Milk‐Run system reduces the average customer lead‐time and total cost. However, a certain extent of risk or uncertainty can still be detected due to the presence of variation.

This paper reveals that company can manage the risk by adopting a systematic method for identifying the potential risks before outsourcing and MCS can be applied for examining the quantifiable risks such as lead time and cost.

The paper provides a generic guideline for practitioners to assess logistics outsourcing, especially for logistics management consultants and professionals for evaluating the risk and impact of outsourcing. It is believed that the proposed risk assessment framework can help to analyze the operational cost uncertainty and ensure the stability of the supply chain. However, the limitation of this research is that the full spectrum of outsourcing risk, especially the non‐quantifiable risk may not be analyzed by MCS.

This paper proposed an integrated framework which combines qualitative and quantitative method together for managing outsourcing risk. This research provides a standardized metric to quantify risk in the supply chain so as to determine the effectiveness of outsourcing.

Aviation has multi-cultural business environment in all aspects as operational and management. Managing aviation requires high awareness on human factor risk which includes organizational behavior-related topics. The greatest risk to an enterprise’s ability to achieve its strategic goals and objectives is the human factor. Both organizational behavior and corporate culture behavior with social psychology are the most vital aspects of management and strategy in terms of human resources. Related risks, including organizational behavior and culture, have the potential to directly impact on both business performance and corporate sustainability. Therefore, in this paper, the most prominent risks were determined in accordance with social psychology, and after identification of human factor-based risks, these have prioritized and prepared risk mapping with fresh approach. For this reason, this study aims to develop risk mapping model for human factors that takes into account interrelations among risk factors three dimensional based new approach. This approach includes both identification of human factor based risks, prioritization them and setting risk mapping according to corporate based qualifications via tailoring risk list. Developed risk map in this paper will help to manage corporate risks to achieve improved performance and sustainability.

This new organizational behavior- and culture-focused risk mapping model developed in this study has the potential to make significant contribution to the management of the human factor for modern management and strategy. In enterprise risk management system, risk mapping is both strong and effective strategic methodology to manage ergonomics issue with strategic approach. Human factor is both determinative and also strategic element to both continuity and performance of business operations with safely and sound. In view of management and strategy, vitally, the human factor determines the outcome in both every business and every decision-making.

It is assumed that, if managers manage human risk you may get advantages to achieving corporate strategies in timely manner. Aviation is sensitive sector for its ingredients: airports, airlines, air traffic management, aircraft maintenance, pilotage and ground handling. Aim of this paper is to present risk management approach to optimize human performance while minimizing both failures and errors by aircraft maintenance technician (AMT). This model may apply all human factors in other departments of aviation such as pilots and traffic controllers. AMT is key component of aircraft maintenance. Thus, errors made by AMTs will cause aircraft accidents or incidents or near miss incidents. In this study, new taxonomy model for human risk factors in aircraft maintenance organizations has been designed, and also new qualitative risk assessment as three dimensions is carried out by considering the factors affecting the AMT’s error obtained from extensive literature review and expert opinions in the field of aviation. Human error risks are first categorized into two main groups and sub three groups and then prioritized using the risk matrix via triple dimension as probability, severity and interrelations ratio between risks.

Risk mapping is established to decide which risk management option they will apply for managers when they will look at this map. Managers may use risk map to both identify their managerial priorities and share sources to managing risks, and make decisions on risk handling options. This new model may be a useful new tool to manage ergonomic human factor-based risks in developing strategy in aviation business management. In addition, this paper will contribute to department of management and strategy and related literature.

This study has originality via new modeling of risk matrix. In this study, dimension of risk analysis has been improved as three dimensions. This study has new approach and new assessment of risk with likelihood (probability), impact (severity) and interrelations ratio. This new model may be a useful new tool to both assess and prioritize mapping of ergonomic-based risks in business management. In addition, this research will contribute to aviation management and strategy literature and also enterprise risk management literature.

The aim of this research is to provide an approach for modeling system risk management and to develop an analytic hierarchy process (AHP)-based model for simulating decisions on introducing innovations in air transport systems.

The paper proposes AHP and analytic network process (ANP) methodologies for overcoming fragmentation in risk assessments perceived by risk, budget, quality or schedule managements, and for resolving potential conflicts between safety, efficiency and well-being.

Issues in system risk evaluation and management were identified and transferred to a list of requirements. A generic ANP-based model for system risk management was developed as well as a template for capture of knowledge on risks, including expert knowledge, and for implementation of a new decision-making process as applied to introducing innovation(s).

Since this research addresses evaluation and management of non-event based risks due to innovations in air transport systems, further analysis and re-evaluation of risks is required during and after the implementation in order to provide continuously dynamic representation of system risk.

The results of this study contribute to the development and implementation of a usable version of multi-criteria decision analysis at senior management level. Further, it stimulates mechanism for learning and trade-offs between various stakeholders.

This work is original in that it is cross-disciplinary (e.g. risk management, management of innovation, systems design). It addresses the issue of integrating a safety management system with an overall business management system. Also, it introduces qualitative non-event risk assessments into system risk management. In addition to the use of the AHP-model for system risk management, an implementation model (“risk stakeholder model”) is also developed.

In a departure from the efficiency theory assumptions implicit in most supply chain risk management (SCRM) literature, this study aims to explore the role that external neo-institutional pressures play in shaping the risk management strategies deployed to mitigate transaction cost risks in construction supply chains (CSC).

A theory-elaborating case study is used to investigate how regulatory, normative and mimetic neo-institutional pressures underpin SCRM strategies in state-led and private-led CSC in China.

The study finds that institutionalized Confucianist networks serve as proxies for regulatory accountability and thereby create a form of dysmorphia in the regulatory, normative and mimetic drivers of SCRM strategies in state-led and private-led CSC in China.

The findings reveal that relational costs such as bargaining, transfer and monitoring costs underpin SCRM in state-led CSC. Behavioral costs associated with search, screening and enforcement are the core drivers of SCRM in private-led CSC. These differences in transaction cost drivers of SCRM arise from the risk-buffering effect of personalized Guanxi networks, creating variants of institutional pressures on actors' risk analysis, identification and treatment strategies in China. Considering China's global hegemony in construction and related industries, this study provides valuable insights for practitioners and researchers on the need for a constrained efficiency view of SCRM in global CSC.