Search results

Consumers increasingly rely on organisations for online services and data storage while these same institutions seek to digitise the information assets they hold to create economic value. Cybersecurity failures arising from malicious or accidental actions can lead to significant reputational and financial loss which organisations must guard against. Despite having some critical weaknesses, qualitative cybersecurity risk analysis is widely used in developing cybersecurity plans. This research explores these weaknesses, considers how quantitative methods might address the constraints and seeks the insights and recommendations of leading cybersecurity practitioners on the use of qualitative and quantitative cyber risk assessment methods.

The study is based upon a literature review and thematic analysis of in-depth qualitative interviews with 16 senior cybersecurity practitioners representing financial services and advisory companies from across the world.

While most organisations continue to rely on qualitative methods for cybersecurity risk assessment, some are also actively using quantitative approaches to enhance their cybersecurity planning efforts. The primary recommendation of this paper is that organisations should adopt both a qualitative and quantitative cyber risk assessment approach.

This work provides the first insight into how senior practitioners are using and combining qualitative and quantitative cybersecurity risk assessment, and highlights the need for in-depth comparisons of these two different approaches.

Businesses are increasingly vulnerable and exposed to physical climate change risks, which can cascade through local, national and international supply chains. Currently, few methodologies can capture how physical risks impact businesses via the supply chains, yet outside the business literature, methodologies such as sustainability assessments can assess cascading impacts.

Adopting a scoping review framework by Arksey and O'Malley (2005) and the PRISMA extension for scoping reviews (PRISMA-ScR), this paper reviews 27 articles that assess climate risk in supply chains.

The literature on supply chain risks of climate change using quantitative techniques is limited. Our review confirms that no research adopts sustainability assessment methods to assess climate risk at a business-level.

Alongside the need to quantify physical risks to businesses is the growing awareness that climate change impacts traverse global supply chains. We review the state of the literature on methodological approaches and identify the opportunities for researchers to use sustainability assessment methods to assess climate risk in the supply chains of an individual business.

This study aims to evaluate the quality of a speech and language therapy (SLT) swallow service provided to adults with intellectual disability (ID) by exploring the process and outcome factors; to explore the process of what is done to and for the patient including identifying dysphagia, choking and pneumonia risk, typical interventions and management; examine clinical outcomes; and explore the relationship of outcomes with risk factors, satisfaction with the service and the impact of the service on the number of choking incidents and admissions to acute hospital with swallow concerns.

There were three specific work packages: (1) collecting and scrutinising patient data from the clinical record for adults with ID referred to the SLT swallow service over a six-month period. The researcher created aims, defined the limits to achieve the aims, designed a standardised data collection form, set out where data was in the clinical record, piloted, set limits for collection and trained reviewers; (2) gathering experience and satisfaction surveys from patients, caregivers and referrers over the six-month study period; and (3) monitoring choking adverse incident reports and hospital admission with swallow concerns for the whole ID population.

Choking and hospital admission were the main reasons for referral, and pneumonia risk significantly predicted dysphagia impairment. The research highlighted common dysphagia risk factors, interventions and recommendations for this population. The SLT swallow service is a quality service that is highly valued by patients, their caregivers and referrers. The service achieves significant clinical improvements, helps identify dysphagia and provides management to reduce associated risks.

This study found common dysphagia risk factors, interventions and recommendations; it also found that the therapy outcome measures/Royal College of Speech and Language Therapy online outcome tool was a meaningful outcome measure, and that pneumonia risk significantly predicted dysphagia impairment, all of which could inform the identified dysphagia research priorities for this population.

Naming usual care in treatment and recommendations could help ensure a fair service and could help form quality indicators. People with ID, their caregivers and staff generated valuable ideas for improvement, and further involvement work could create a logic model for the service. Other future work could explore the use of screening tools, increase multidisciplinary team working, improve access to instrumental assessments, raise awareness of swallowing and promote important oral health and medication reviews. By using this information to shape quality improvement work and policies, one can work toward addressing high health-related inequalities and preventable deaths associated with dysphagia in this vulnerable population.

It may be useful to raise awareness that adults with ID age earlier and that one should not exclude them from older people’s services because of an age threshold, often set higher than their life expectancy. This study highlighted a possible inequality of access issue for adults with ID who do not have direct care or day care staff. There is a need to increase access to awareness training so caregivers and general practitioners can recognise swallow difficulties and know how to make a referral for a swallow assessment.

Overall, the evaluation of the swallow service to adults with ID suggests that SLT have a quality service for adults with ID that is highly valued and provides significant clinical improvements. By building on these strengths, SLT could extend the reach, influence and impact of their services to help those adults with ID who have emerging swallow difficulties or who do not access the service.

Identifying and prioritizing supply chain risk is significant from any product’s quality and reliability perspective. Under an input-process-output workflow, conventional risk prioritization uses a risk priority number (RPN) aligned to the risk analysis. Imprecise information coupled with a lack of dealing with hesitancy margins enlarges the scope, leading to improper assessment of risks. This significantly affects monitoring quality and performance. Against the backdrop, a methodology that identifies and prioritizes the operational supply chain risk factors signifies better risk assessment.

The study proposes a multi-criteria model for risk prioritization involving multiple decision-makers (DMs). The methodology offers a robust, hybrid system based on the Intuitionistic Fuzzy (IF) Set merged with the “Technique for Order Performance by Similarity to Ideal Solution.” The nature of the model is robust. The same is shown by applying fuzzy concepts under multi-criteria decision-making (MCDM) to prioritize the identified business risks for better assessment.

The proposed IF Technique for Order Preference by Similarity to the Ideal Solution (TOPSIS) for risk prioritization model can improve the decisions within organizations that make up the chains, thus guaranteeing a “better quality in risk management.” Establishing an efficient representation of uncertain information related to traditional failure mode and effects analysis (FMEA) treatment involving multiple DMs means identifying potential risks in advance and providing better supply chain control.

In a company’s supply chain, blockchain allows data storage and transparent transmission of flows with traceability, privacy, security and transparency (Roy et al., 2022). They asserted that blockchain technology has great potential for traceability. Since risk assessment in supply chain operations can be treated as a traceability problem, further research is needed to use blockchain technologies. Lastly, issues like risk will be better assessed if predicted well; further research demands the suitability of applying predictive analysis on risk.

The study proposes a hybrid framework based on the generic risk assessment and MCDM methodologies under a fuzzy environment system. By this, the authors try to address the supply chain risk assessment and mitigation framework better than the conventional one. To the best of their knowledge, no study is found in existing literature attempting to explore the efficacy of the proposed hybrid approach over the traditional RPN system in prime sectors like steel (with production planning data). The validation experiment indicates the effectiveness of the results obtained from the proposed IF TOPSIS Approach to Risk Prioritization methodology is more practical and resembles the actual scenario compared to those obtained using the traditional RPN system (Kim et al., 2018; Kumar et al., 2018).

This study provides mathematical models to simulate the supply chain risk assessment, thus helping the manufacturer rank the risk level. In the end, the authors apply this model in a big-sized organization to validate its accuracy. The authors validate the proposed approach to an integrated steel plant impacting the production planning process. The model’s outcome substantially adds value to the current risk assessment and prioritization, significantly affecting better risk management quality.

This paper is motivated by the need to assess the risk profiles associated with the substantial number of items within military supply chains. The scale of supply chain management processes creates difficulties in both the complexity of the analysis and in performing risk assessments that are based on the manual (human analyst) assessment methods. Thus, analysts require methods that can be automated and that can incorporate on-going operational data on a regular basis.

The approach taken to address the identification of supply chain risk within an operational setting is based on aspects of multiobjective decision analysis (MODA). The approach constructs a risk and importance index for supply chain elements based on operational data. These indices are commensurate in value, leading to interpretable measures for decision-making.

Risk and importance indices were developed for the analysis of items within an example supply chain. Using the data on items, individual MODA models were formed and demonstrated using a prototype tool.

To better prepare risk mitigation strategies, analysts require the ability to identify potential sources of risk, especially in times of disruption such as natural disasters.

In the evolution process of building construction accidents, there are key nodes of risk change. This paper aims to quickly identify the key nodes and quantitatively assess the node risk. Furthermore, it is essential to propose risk accumulation assessment method of building construction.

Authors analyzed 419 accidents investigation reports on building construction. In total, 39 risk factors were identified by accidents analysis. These risk factors were combined with 245 risk evolution chains. Based on those, Gephi software was used to draw the risk evolution network model for building construction. Topological parameters were applied to interpret the risk evolution network characteristic.

Combining complex network with risk matrix, the standard of quantitative classification of node risk level is formulated. After quantitative analysis of node risk, 7 items of medium-risk node, 3 items of high-risk node and 2 items of higher-risk nodes are determined. The application results show that the system risk of the project is 44.67%, which is the high risk level. It can reflect the actual safety conditions of the project in a more comprehensive way.

This paper determined the level of node risk only using the node degree and risk matrix. In future research, more node topological parameters that could be applied to node risk, such as clustering coefficients, mesoscopic numbers, centrality, PageRank, etc.

This article can quantitatively assess the risk accumulation of building construction. It would help safety managers could clarify the system risk status. Moreover, it also contributes to reveal the correspondence between risk accumulation and accident evolution.

This study comprehensively considers the likelihood, consequences and correlation to assess node risk. Based on this, single-node risk and system risk assessment methods of building construction systems were proposed. It provided a promising method and idea for the risk accumulation assessment method of building construction. Moreover, evolution process of node risk is explained from the perspective of risk accumulation.

In traditional Bayesian belief networks (BBNs), a large amount of data are required to complete network parameters, which makes it impractical. In addition, no systematic method has been used to create the structure of the BBN. The aims of this study are to: (1) decrease the number of questions and time and effort required for completing the parameters of the BBN and (2) present a simple and apprehensible method for creating the BBN structure based on the expert knowledge.

In this study, by combining the decision-making trial and evaluation laboratory (DEMATEL), interpretive structural modeling (ISM) and BBN, a model is introduced that can form the project risk network and analyze the impact of risk factors on project cost quantitatively based on the expert knowledge. The ranked node method (RNM) is then used to complete the parametric part of the BBN using the same data obtained from the experts to analyze DEMATEL.

Compared to the traditional BBN, the proposed method will significantly reduce the time and effort required to elicit network parameters and makes it easy to create a BBN structure. The results obtained from the implementation of the model on a mass housing project showed that considering the identified risk factors, the cost overruns relating to material, equipment, workforce and overhead cost were 37.6, 39.5, 42 and 40.1%, respectively.

Compared to the traditional BBN, the proposed method will significantly reduce the time and effort required to elicit network parameters and makes it easy to create a BBN structure. The results obtained from the implementation of the model on a mass housing project showed that considering the identified risk factors, the cost overruns relating to material, equipment, workforce and overhead cost were 37.6, 39.5, 42 and 40.1%, respectively. The obtained results are based on a single case study project and may not be readily generalizable.

The presented framework makes the BBN more practical for quantitatively assessing the impact of risk on project costs. This helps to manage financial issues, which is one of the main reasons for project bankruptcy.

Factors that may influence risk and/or vulnerability to young people’s involvement in terrorism are currently unclear. Understanding the factors that contribute to a young person’s risk profile is a high priority for Youth Justice Services to enable the development of targeted interventions and subsequent risk reduction. The purpose of this study is to systematically identify and critically review studies relating to young peoples’ involvement in terrorism to understand potential risk and/or vulnerability factors and the implications for intervention.

Literature was evaluated using the systematic review method. Twelve papers were selected for the systematic review according to the inclusion criteria.

Twelve factors emerged that indicated relevance to terrorism by young people and were combined into five overarching themes: contextual, social, psychological factors, trauma and use of time.

This systematic review is one of the first of its kind relating to terrorism by young people. The reported findings will be valuable to practitioners seeking to understand the risk and vulnerability factors related to terrorism by young people and the implications for intervention. Directions for future research are explored.

The inherent risks and their interactive impacts in megaproject development have been found in numerous cases worldwide. Although risk management standards have been recommended for the best practice in engineering construction projects, there is still a lack of systematic approaches to describing the interactions. Interactions such as social, technical, economic, ecological and political (STEEP) risks have complex and dynamic implications for megaproject construction. For a better understanding and effective management of megaprojects such as the Edinburgh Tram project, the dynamic interaction of concomitant risks must be studied.

A systems dynamic methodology was adopted following the comprehensive literature review. Documentary data were gathered from the case study on Tram Network Project in Edinburgh.

A casual loop of typical evolution of key indicators of risks was then developed. A hypothesised model of social and ecological (SE) risks was derived using the system dynamics (SD) modelling technique. The model was set up following British Standards on risk management to provide a generic tool for risk management in megaproject development. The study reveals that cost and time overruns at the developmental stage of the case project are caused mainly by the effects of interactions of risk factors from the external macro project environment on a timely basis.

This article presented a model for simulating the socio-ecological risk confronting the management and construction of megaprojects. The use of SD provided the opportunity to explain the nature of all risks, particularly the SE risks in the past stages of project development.

This paper aims to provide authorities managing free trade zones, business enterprises, financial institutions and dedicated free zone customs, police and immigration command assigned to deal with aspects of movement of goods and persons in and out of the free zones with a clear understanding of the cross-border financial crime risks associated with the African Continental Free Trade Area and the risk control measures that combines human intelligence with advanced technology to combat cross-border financial crimes in the African Continental Free Trade Area.

A range of research activities would be used in this study. In addition to a sweeping literature review of academic, official studies and media writings, the main focus is on critically evaluating and analysing primary data by searching and collecting statutes, court cases, administrative rules and regulations and policy documents.

This paper identified bribery and corruption; modern slavery; and trade-based money laundering as the financial crime risks that are of priority concern to African Continental Free Trade Areas and demonstrated how countries can assess and mitigate these risks through adequate policies, procedures and controls including appropriate compliance management arrangement and adequate screening procedures to ensure high standards when hiring employees; corporate transparency; training on managing incidents of modern slavery, forced labour and third-party exploitation; and appropriate monitoring framework for trade-based money laundering activities.

While many authors have written research papers on intra-African trade, none of those research papers explained how countries can assess and mitigate financial crime risks in free trade zones. This research paper describes the ways in which cross-border financial crime risks can be assessed and adequately addressed by the authorities managing free trade zones. This research paper analyses the risk assessment topic in line with the African Continental Free Trade Area with a focus on free trade zones in Nigeria. This research paper would help authorities managing free trade zones, commercial organisations and business enterprises to identify, prevent and mitigate cross-border financial crime risks. Zone managements and business enterprises that implement the risk-based approach, in line with the guidance given in this research paper, will be well-placed to avoid the consequences of inappropriate de-risking behaviour.