Search results

Consumers increasingly rely on organisations for online services and data storage while these same institutions seek to digitise the information assets they hold to create economic value. Cybersecurity failures arising from malicious or accidental actions can lead to significant reputational and financial loss which organisations must guard against. Despite having some critical weaknesses, qualitative cybersecurity risk analysis is widely used in developing cybersecurity plans. This research explores these weaknesses, considers how quantitative methods might address the constraints and seeks the insights and recommendations of leading cybersecurity practitioners on the use of qualitative and quantitative cyber risk assessment methods.

The study is based upon a literature review and thematic analysis of in-depth qualitative interviews with 16 senior cybersecurity practitioners representing financial services and advisory companies from across the world.

While most organisations continue to rely on qualitative methods for cybersecurity risk assessment, some are also actively using quantitative approaches to enhance their cybersecurity planning efforts. The primary recommendation of this paper is that organisations should adopt both a qualitative and quantitative cyber risk assessment approach.

This work provides the first insight into how senior practitioners are using and combining qualitative and quantitative cybersecurity risk assessment, and highlights the need for in-depth comparisons of these two different approaches.

Businesses are increasingly vulnerable and exposed to physical climate change risks, which can cascade through local, national and international supply chains. Currently, few methodologies can capture how physical risks impact businesses via the supply chains, yet outside the business literature, methodologies such as sustainability assessments can assess cascading impacts.

Adopting a scoping review framework by Arksey and O'Malley (2005) and the PRISMA extension for scoping reviews (PRISMA-ScR), this paper reviews 27 articles that assess climate risk in supply chains.

The literature on supply chain risks of climate change using quantitative techniques is limited. Our review confirms that no research adopts sustainability assessment methods to assess climate risk at a business-level.

Alongside the need to quantify physical risks to businesses is the growing awareness that climate change impacts traverse global supply chains. We review the state of the literature on methodological approaches and identify the opportunities for researchers to use sustainability assessment methods to assess climate risk in the supply chains of an individual business.

In the evolution process of building construction accidents, there are key nodes of risk change. This paper aims to quickly identify the key nodes and quantitatively assess the node risk. Furthermore, it is essential to propose risk accumulation assessment method of building construction.

Authors analyzed 419 accidents investigation reports on building construction. In total, 39 risk factors were identified by accidents analysis. These risk factors were combined with 245 risk evolution chains. Based on those, Gephi software was used to draw the risk evolution network model for building construction. Topological parameters were applied to interpret the risk evolution network characteristic.

Combining complex network with risk matrix, the standard of quantitative classification of node risk level is formulated. After quantitative analysis of node risk, 7 items of medium-risk node, 3 items of high-risk node and 2 items of higher-risk nodes are determined. The application results show that the system risk of the project is 44.67%, which is the high risk level. It can reflect the actual safety conditions of the project in a more comprehensive way.

This paper determined the level of node risk only using the node degree and risk matrix. In future research, more node topological parameters that could be applied to node risk, such as clustering coefficients, mesoscopic numbers, centrality, PageRank, etc.

This article can quantitatively assess the risk accumulation of building construction. It would help safety managers could clarify the system risk status. Moreover, it also contributes to reveal the correspondence between risk accumulation and accident evolution.

This study comprehensively considers the likelihood, consequences and correlation to assess node risk. Based on this, single-node risk and system risk assessment methods of building construction systems were proposed. It provided a promising method and idea for the risk accumulation assessment method of building construction. Moreover, evolution process of node risk is explained from the perspective of risk accumulation.

The occupational health risk associated with the production of prefabricated concrete components is often overlooked. This paper will use a damage assessment and cyclic mitigation (DACM) model to provide individualized exposure risk assessment and corresponding mitigation management measures for workers who are being exposed.

The DACM model is proposed based on the concept of life cycle assessment (LCA). The model uses Monte-Carlo simulation for uncertainty risk assessment, followed by quantitative damage assessment using disability-adjusted life year (DALY). Lastly, sensitivity analysis is used to identify the parameters with the greatest impact on health risks.

The results show that the dust concentration is centered around the mean, and the fitting results are close to normal distribution, so the mean value can be used to carry out the calculation of risk. However, calculations using the DACM model revealed that there are still some work areas at risk. DALY damage is most severe in concrete production area. Meanwhile, the inhalation rate (IR), exposure duration (ED), exposure frequency (EF) and average exposure time (AT) showed greater impacts based on the sensitivity analysis.

Based on the comparison, the DACM model can determine that the potential occupational health risk of prefabricated concrete component (PC) factory and the risk is less than that of on-site construction. It synthesizes field research and simulation to form the entire assessment process into a case-base system with the depth of the cycle, which allows the model to be continuously adjusted to reduce the occupational health damage caused by production pollution exposure.

The study aims to assess the effectiveness of prevailing methods for quantifying physical climate risks. Its goal is to evaluate their utility in guiding financial decision-making within the real estate industry. Whilst climate risk has become a pivotal consideration in transaction and regulatory compliance, the existing tools for risk quantification frequently encounter criticism for their perceived lack of transparency and comparability.

We utilise a sequential exploratory mixed-methods analysis to integrate qualitative aspects of underlying tool characteristics with quantitative result divergence. In our qualitative analysis, we conduct interviews with companies providing risk quantification tools. We task these providers with quantifying the physical risk of a fictive pan-European real estate portfolio. Our approach involves an in-depth comparative analysis, hypothesis tests and regression to discern patterns in the variability of the results.

We observe significant variations in the quantification of physical risk for the pan-European portfolio, indicating limited utility for decision-making. The results highlight that variability is influenced by both the location of assets and the hazard. Identified reasons for discrepancies include differences in regional databases and models, variations in downscaling and corresponding scope, disparities in the definition of scores and systematic uncertainties.

The study assists market participants in comprehending both the quantification process and the implications associated with using tools for financial decision-making.

To our knowledge, this study presents the initial robust empirical evidence of variability in quantification outputs for physical risk within the real estate industry, coupled with an exploration of their underlying reasons.

In traditional Bayesian belief networks (BBNs), a large amount of data are required to complete network parameters, which makes it impractical. In addition, no systematic method has been used to create the structure of the BBN. The aims of this study are to: (1) decrease the number of questions and time and effort required for completing the parameters of the BBN and (2) present a simple and apprehensible method for creating the BBN structure based on the expert knowledge.

In this study, by combining the decision-making trial and evaluation laboratory (DEMATEL), interpretive structural modeling (ISM) and BBN, a model is introduced that can form the project risk network and analyze the impact of risk factors on project cost quantitatively based on the expert knowledge. The ranked node method (RNM) is then used to complete the parametric part of the BBN using the same data obtained from the experts to analyze DEMATEL.

Compared to the traditional BBN, the proposed method will significantly reduce the time and effort required to elicit network parameters and makes it easy to create a BBN structure. The results obtained from the implementation of the model on a mass housing project showed that considering the identified risk factors, the cost overruns relating to material, equipment, workforce and overhead cost were 37.6, 39.5, 42 and 40.1%, respectively.

Compared to the traditional BBN, the proposed method will significantly reduce the time and effort required to elicit network parameters and makes it easy to create a BBN structure. The results obtained from the implementation of the model on a mass housing project showed that considering the identified risk factors, the cost overruns relating to material, equipment, workforce and overhead cost were 37.6, 39.5, 42 and 40.1%, respectively. The obtained results are based on a single case study project and may not be readily generalizable.

The presented framework makes the BBN more practical for quantitatively assessing the impact of risk on project costs. This helps to manage financial issues, which is one of the main reasons for project bankruptcy.

This research proposes a novel risk assessment model to elucidate the risk propagation process of industrial safety accidents triggered by natural disasters (Natech), identifies key factors influencing urban carrying capacity and mitigates uncertainties and subjectivity due to data scarcity in Natech risk assessment.

Utilizing disaster chain theory and Bayesian network (BN), we describe the cascading effects of Natechs, identifying critical nodes of urban system failure. Then we propose an urban carrying capacity assessment method using the coefficient of variation and cloud BN, constructing an indicator system for infrastructure, population and environmental carrying capacity. The model determines interval values of assessment indicators and weights missing data nodes using the coefficient of variation and the cloud model. A case study using data from the Pearl River Delta region validates the model.

(1) Urban development in the Pearl River Delta relies heavily on population carrying capacity. (2) The region’s social development model struggles to cope with rapid industrial growth. (3) There is a significant disparity in carrying capacity among cities, with some trends contrary to urban development. (4) The Cloud BN outperforms the classical Takagi-Sugeno (T-S) gate fuzzy method in describing real-world fuzzy and random situations.

The present research proposes a novel framework for evaluating the urban carrying capacity of industrial areas in the face of Natechs. By developing a BN risk assessment model that integrates cloud models, the research addresses the issue of scarce objective data and reduces the subjectivity inherent in previous studies that heavily relied on expert opinions. The results demonstrate that the proposed method outperforms the classical fuzzy BNs.

Hoisting is an essential construction work package, but there is still a high incidence of accidents due to insufficient attention to coping strategies. This study aims to provide decision support to practitioners on safety protocols by developing a multi-stakeholder risk response model and a novel evaluation method.

Firstly, the study summarizes the hoisting risk response strategies system through a literature review and stakeholder theory. Secondly, the study constructed a quantitative theoretical model based on GLS-SEM and questionnaires. Third, the EWM-VA evaluation method was developed to determine the value coefficients of strategies.

The strategic interaction between government and consultants, consultants and builders, and government and builders are in the top three pronounced. Three coping strategies, “Increase funding for lifting equipment and safety devices,” “Improve the quality of safety education and training on lifting construction,” and “Conduct regular emergency rescue drills for lifting accidents,” have the optimal ratio of benefits to costs.

The hoisting risk strategy model from the perspective of multi-interested subjects proposed by the study is based on the global thinking of the project, which reduces the troubles such as the difficulty of pursuing responsibility and the irrational allocation of strategies that were brought by the previously related studies that only considered a single interested subject. In addition, the EWM-VA evaluation method developed in the study also provides new options for evaluating risk strategies and has the potential to be extended to other fields.

Traditional risk prioritization methods in Enterprise Risk Management (ERM) rely on precise data, which is often not available in real-world contexts. This study addresses the need for a robust model that can handle uncertain and imprecise information for more accurate risk assessment.

We propose a group decision-making approach using fuzzy numbers to represent risk attributes and preferences. These are converted into fuzzy risk scores through defuzzification, providing a reliable method for risk ranking.

The proposed fuzzy risk prioritization framework improves decision-making and risk awareness in businesses. It offers a more accurate and robust ranking of enterprise risks, enhancing control and performance in supply chain operations by effectively representing uncertainty and accommodating multiple decision-makers.

The adoption of this fuzzy risk prioritization framework can lead to significant improvements in enterprise risk management across various industries. By accommodating uncertainty and multiple decision-makers, organizations can achieve more reliable risk assessments, ultimately enhancing operational efficiency and strategic decision-making. This model serves as a guide for firms seeking to refine their risk management processes under conditions of imprecise information.

This study introduces a novel weighted fuzzy Risk Priority Number method validated in the risk management process of an integrated steel plant. It is the first to apply this fuzzy approach in the steel industry, demonstrating its practical effectiveness under imprecise information. The results contribute significantly to risk assessment literature and provide a benchmarking tool for improving ERM practices.

Many waste-to-energy (WTE) plants are constructed and operated using the public-private partnership (PPP) mode in China. However, risk events of PPP WTE incineration projects sometimes occur. This study aims to clarify the relationship of risks in China's PPP WTE incineration projects and identify the key risks accordingly and risk transmission paths.

A risk list of PPP WTE incineration projects was obtained based on literature analysis. Moreover, a hybrid approach combining fuzzy sets, decision-making trial and evaluation laboratory (DEMATEL) and interpretive structural modeling (ISM) was developed to analyze the causality of risks, explore critical risks and reveal the risk transmission paths. The quantitative analysis process was implemented in MATLAB.

The results show that government decision-making risk, government credit risk, government supervision behavior risk, legal and policy risk, revenue and cost risk and management capacity risk are the critical risks of PPP WTE incineration projects in China. These critical risks are at different levels in the risk hierarchy and often trigger other risks.

Currently, there is a lack of exploration on the interaction between the risks of PPP WTE incineration projects. This study fills this gap by examining the key risks and risk transfer pathways of PPP WTE incineration projects from the perspective of risk interactions. The findings can help the public and private sectors to systematically understand the risks in PPP WTE incineration projects, thus enabling them to identify the risks that need to be focused on when making decisions and to optimize risk prevention strategies. The proposed hybrid approach can offer methodological ideas for risk analysis of other types of PPP projects.