Search results

Consumers increasingly rely on organisations for online services and data storage while these same institutions seek to digitise the information assets they hold to create economic value. Cybersecurity failures arising from malicious or accidental actions can lead to significant reputational and financial loss which organisations must guard against. Despite having some critical weaknesses, qualitative cybersecurity risk analysis is widely used in developing cybersecurity plans. This research explores these weaknesses, considers how quantitative methods might address the constraints and seeks the insights and recommendations of leading cybersecurity practitioners on the use of qualitative and quantitative cyber risk assessment methods.

The study is based upon a literature review and thematic analysis of in-depth qualitative interviews with 16 senior cybersecurity practitioners representing financial services and advisory companies from across the world.

While most organisations continue to rely on qualitative methods for cybersecurity risk assessment, some are also actively using quantitative approaches to enhance their cybersecurity planning efforts. The primary recommendation of this paper is that organisations should adopt both a qualitative and quantitative cyber risk assessment approach.

This work provides the first insight into how senior practitioners are using and combining qualitative and quantitative cybersecurity risk assessment, and highlights the need for in-depth comparisons of these two different approaches.

Limited facilities operating and modernization budgets require organizations to carefully identify, prioritize and authorize projects to ensure allocated resources align with strategic objectives. Traditional facility prioritization methods using risk matrices can be improved to increase granularity in categorization and avoid mathematical error or human cognitive biases. These limitations restrict the utility of prioritizations and if erroneously used to select projects for funding, they can lead to wasted resources. This paper aims to propose a novel facility prioritization methodology that corrects these assessment design and implementation issues.

A Mamdani fuzzy logic inference system is coupled with a traditional, categorical risk assessment framework to understand a facilities’ consequence of failure and its effect on an organization’s strategic objectives. Model performance is evaluated using the US Air Force’s facility portfolio, which has been previously assessed, treating facility replicability and interruptability as minimization objectives. The fuzzy logic inference system is built to account for these objectives, but as proof of ease-of-adaptation, facility dependency is added as an additional risk assessment criterion.

Results of the fuzzy logic-based approach show a high degree of consistency with the traditional approach, though the value of the information provided by the framework developed here is considerably higher, as it creates a continuous set of facility prioritizations that are unbiased. The fuzzy logic framework is likely suitable for implementation by diverse, spatially distributed organizations in which decision-makers seek to balance risk assessment complexity with an output value.

This paper fills the identified need for portfolio management strategies that focus on prioritizing projects by risk to organizational operations or objectives.

In the continuous development of high-speed railways, ensuring the safety of the operation control system is crucial. Electromagnetic interference (EMI) faults in signaling equipment may cause transportation interruptions, delays and even threaten the safety of train operations. Exploring the impact of disturbances on signaling equipment and establishing evaluation methods for the correlation between EMI and safety is urgently needed.

This paper elaborates on the necessity and significance of studying the impact of EMI as an unavoidable and widespread risk factor in the external environment of high-speed railway operations and continuous development. The current status of research methods and achievements from the perspectives of standard systems, reliability analysis and safety assessment are examined layer by layer. Additionally, it provides prospects for innovative ideas for exploring the quantitative correlation between EMI and signaling safety.

Despite certain innovative achievements in both domestic and international standard systems and related research for ensuring and evaluating railway signaling safety, there’s a lack of quantitative and strategic research on the degradation of safety performance in signaling equipment due to EMI. A quantitative correlation between EMI and safety has yet to be established. On this basis, this paper proposes considerations for research methods pertaining to the correlation between EMI and safety.

This paper overviews a series of methods and outcomes derived from domestic and international studies regarding railway signaling safety, encompassing standard systems, reliability analysis and safety assessment. Recognizing the necessity for quantitatively describing and predicting the impact of EMI on high-speed railway signaling safety, an innovative approach using risk assessment techniques as a bridge to establish the correlation between EMI and signaling safety is proposed.

The purpose of this paper is to develop a quantitative risk assessment method for agricultural products cold chain logistics to assess the condition of the fresh agricultural products cold chain process objectively and accurately.

A risk assessment index system of agricultural products cold chain logistics is designed on the basis of the risk identification for the process of agricultural products cold chain logistics. This paper first uses catastrophe progression method and a new maximum deviation method to build an improved catastrophe progression assessment model for agricultural products cold chain logistics. In order to verify the reliability and validity of the model, two representative enterprises are selected as the case in the study.

The results in the empirical research indicate strong support for the assessment model and coincide with the reality. The risk assessment index system can also reflect the key risk factors from agricultural products cold chain logistics scientifically. In addition, the improved catastrophe progression assessment method proposed in this paper can be scientific and reasonable to predict risk.

This paper contributes to provide a new risk assessment model for agricultural products cold chain logistics. The new model overcomes the limitation of subjective empowerment and it increases the objectivity and scientificity in the process of cold chain logistics risk assessment. This paper also shows that practitioners involved in the field of products cold chain logistics can manage the potential risk by a set of scientific methods for assessing the risk before the accident.

The paper provides a practical guideline to practitioners, especially for cold chain logistics managers, relevant management departments, and cold chain logistics management consultants. It is proved that the new risk assessment method and the risk assessment index system of agricultural products cold chain logistics can help them assess the risk scientifically and reasonably.

Although the calculation is simple, the new model can overcome the limitation of subjective empowerment scientifically and reasonably, and thus has important practical value.

Due to the globalization of trade, hundreds of millions containers pass every year through world ports. Such a situation is extremely challenging in terms of securing freight transport operations. However, costs and lead-times are still very important components of supply chains' performance models. Therefore, the drive for enhanced safety and security cannot be made at the expense of these other two factors of competitiveness, and the processes implemented by the global supply chain links, including the maritime port one, should tend to a joint optimization of trade facilitation and operational safety / security.

The research on which this paper feeds back falls within the frame of this mixed performance requirement. More specifically, the paper presents a decision-support system dedicated to managing the risks associated with land and maritime container transportation; this system is based on the modeling of the knowledge of a group of experts, and covers the three phases of risk identification, assessment and avoidance / mitigation.

This paper is motivated by the need to assess the risk profiles associated with the substantial number of items within military supply chains. The scale of supply chain management processes creates difficulties in both the complexity of the analysis and in performing risk assessments that are based on the manual (human analyst) assessment methods. Thus, analysts require methods that can be automated and that can incorporate on-going operational data on a regular basis.

The approach taken to address the identification of supply chain risk within an operational setting is based on aspects of multiobjective decision analysis (MODA). The approach constructs a risk and importance index for supply chain elements based on operational data. These indices are commensurate in value, leading to interpretable measures for decision-making.

Risk and importance indices were developed for the analysis of items within an example supply chain. Using the data on items, individual MODA models were formed and demonstrated using a prototype tool.

To better prepare risk mitigation strategies, analysts require the ability to identify potential sources of risk, especially in times of disruption such as natural disasters.

The purpose of this paper is to identify the productivity improvement potentials from maintenance planning practices in manufacturing companies. In particular, the paper aims at understanding the connection between machine criticality assessment and maintenance prioritization in industrial practice, as well as providing the improvement potentials.

An explanatory mixed method research design was used in this study. Data from literature analysis, a web-based questionnaire survey, and semi-structured interviews were gathered and triangulated. Additionally, simulation experimentation was used to evaluate the productivity potential.

The connection between machine criticality and maintenance prioritization is assessed in an industrial set-up. The empirical findings show that maintenance prioritization is not based on machine criticality, as criticality assessment is non-factual, static, and lacks system view. It is with respect to these finding that the ways to increase system productivity and future directions are charted.

In addition to the empirical results showing productivity improvement potentials, the paper emphasizes on the need for a systems view for solving maintenance problems, i.e. solving maintenance problems for the whole factory. This contribution is equally important for both industry and academics, as the maintenance organization needs to solve this problem with the help of the right decision support.

Railway-level crossings (RLCs) are the point of intersection between rail and road users and are therefore hotpots of road-rail user conflict and catastrophic collisions. The purpose of this study is to assess the risks associated with RLCs and suggest probable reduction measures. Through questionnaires and visual inspection, the authors identify the safety risks, hazards and hazardous events at some railway crossing of Addis Ababa light rail transit (AA-LRT) north-south (N-S) route. The identified risky events are then categorized based on As Low As Reasonably Practicable (ALARP) principle and generic risk ranking matrix. The authors then examine existing safety management measures at railway crossing and assess the need for additional safety management. Five major crossings on the 16.9 km (10.5 mi) N-S line, starting from Menelik II Square to Kality, were considered for the study. This study is carried out by data collection from about 145 stakeholders and the application of statistical data and risk analysis methods. The major findings of this study and the recommendations for improvement are suggested.

The research followed a case study approach. Through questionnaires and visual inspection, the authors identify the safety risks, hazards and hazardous events at some railway crossing of AA-LRT N-S route. The identified risky events are then categorized based on ALARP principle and generic risk ranking matrix. Collected data was then analyzed using SPSS to deduce relationships.

The study findings reveal human factors as the greatest cause of accidents, injury or death. About 22% of hazards identified by category are human factors, whereas 20% are because of technical problems. Intolerable risks stand at 42%, whereas the tolerable risks are at 36% according to risk classification results as per the ALARP model. Because the process of risk management is a long-term cycle, its importance should not be missed at any time.

Because of design considerations of RLCs and the difference in generalized human behaviors for people of a given region, the results are limited to AA-LRT RLCs. This study opens a discourse for detailed evaluations, qualitative and quantitative analysis into the categorized identified hazards. There is also room for additional research into the performance of RLCs aimed at formulating standard necessary features that should be included on RLCs for proper risk control especially in emerging economies.

The research paper is original and has not been submitted for consideration to other journals.

The main purpose of the present study was to improve and develop previously proposed models for Iran telecommunication networks. It should be noted that the six-dimensional (6D) sustainability model used in this study will be a useful and comprehensive model for industries. Since, the new dimension of IT along with the five well-known economic, social, environmental, technical and institutional aspects of organizations is considered to have great impacts on supply chain sustainability; the proposed framework can be practical.

According to the related literature review, there are two research streams in supply chain management. The first stream is exploratory research, seeking out conceptual discussions in this area. The second one is associated with mathematical models and techniques, aiming to set decision-making rules in this regard (Agrell et al., 2004). In this study, evaluation was performed using the FMEA method as an analytical technique based on the principle of pre-occurrence prevention to identify potential failure factors in sensitive systems (Mohammadfam and Kianfari, 2008).

After identifying the risks and causes of the incidence and effects and consequences of risks, preventive and risk control measures and advisory strategies were presented. Customers with 45.76% share in critical risks are threatening to maintain supply chain in these companies. During this study, it was found that 33.9% of the main source of supply chain critical risks was customers, constituting 45.76% of such risks, accompanied by organization, having a 38.88% share of critical risk generation. The study findings also revealed that 33.9% of critical risks were mainly (equally) related to economic and technical aspects of supply chain sustainability in telecommunication networks. Moreover, as a newly-introduced sixth dimension, IT represented 10.17% of critical risks threatening supply chain sustainability in such networks. Critical risks are mainly related to the economic and technical aspects (equally) with the sustainability of the telecommunication networks supply chain. Also, as a new finding and the sixth dimension, 10.17% of the critical risks that threaten the sustainability of the telecommunication networks supply chain have the information technology dimension.

The internet and fixed and mobile data services are provided by several private companies in Iran, which are relatively similar in terms of their supply chains. In order to manage the sustainability of Iran's telecommunication supply chain, telecommunication networks affiliated to Iran Telecommunication Company (ITC), operating in the field of data and internet services and fixed telephone were selected in 31 provinces. The intended networks were also providing an important part of the country's needs including Mobile Telecommunication Company of Iran, a subsidiary of Iran's telecommunication networks, as one of the top companies in this industry. Accordingly, all the networks studied in this study needed to be identified with regard to communication sustainability risks, since they provide management solutions to each other by segregating risks. In this study, 68 managers and 72 experts participated in different work teams of telecommunication networks.