2. Home
  3. ARCHIVE
  4. 2023
  5. VOL 45, NO 6 (2023)
  6. pp. 31-40

USING THE WALD MAXIMIN CRITERION FOR RISK ANALYSIS OF HARD-TO-PREDICT THREATS IN THE CONTEXT OF RESILIENCE

F. Korobeynikov

Èlektron. model. 2023, 45(6):31-39

https://doi.org/10.15407/emodel.45.06.031

ABSTRACT

The application of the Wald’s criterion for risk analysis and management within the context of ensuring resilience for mission-critical information systems, operations, and organizations in conditions of uncertainty is considered. The proposed method facilitates addressing risks associated with stochastic and HILF (high impact, low frequency) threats, the probability of which is challenging to predict. This approach is grounded in assessing potential damages and the cost of countermeasures concerning these types of threats. Notably, the focus is directed towards examining the worst possible outcomes of the evaluated threats, reducing the need for accurate probability forecasting. Utilizing the maximin criterion allows for surpassing the constraints of the standard risk matrix, which is employed to determine the risk level by juxtaposing the threat’s probability category with the severity of its implications. Consequently, information security systems can attain heightened levels of efficiency, which, subsequently, bolsters the resilience of the organizations they safeguard.

KEYWORDS

resilience, security, risk management, HILF, stochastic threats, Wald’s criterion, maximin.

REFERENCES

  1. Procedure for the implementation of the information security system in government agencies, enterprises, organizations whose information and communication systems process information, the requirement for protection of which is established by law and does not constitute a state secret (2021) НД ТЗІ 3.6-004-21. Administration of the State Special Communications Service of Ukraine.
  2. Masys, A.J., Ray-Bennett, N., Shiroshita, H., & Jackson, P. (2014). High Impact/Low Frequency Extreme Events: Enabling Reflection and Resilience in a Hyper-connected World. Procedia Economics and Finance, 18, 772-779. https://doi.org/10.1016/S2212-5671(14)01001-6.
  3. Murray, N.J., Keith, D.A., Bland, L.M., Nicholson, E., Regan, T.J., Rodríguez, J.P., & Bedward, M. (2017). The use of range size to assess risks to biodiversity from stochastic threats. Diversity and Distributions, 23(5), 474-483. https://doi.org/10.1111/ddi.12533.
  4. NIST Special Publication 800-160, Volume 2. Developing cyber-resilient systems: A systems security engineering approach. (2021). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.SP.800-160v2r1
  5. Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1. (2018). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.CSWP.04162018
  6. ISO/IEC 27001:2022. International Organization for Standardization. Information security management systems. Requirements. (2022) https://www.iso.org/standard/27001
  7. Korobeynikov, F. (2023). Resilience Paradigm Development in The Security Domain. Electronic Modeling, 45(4), 88-111. https://doi.org/10.15407/emodel.45.04.088.
  8. Linkov, I., Bridges, T., Creutzig, F., Decker, J., Fox-Lent, C., Kröger, W., Lambert, J.H., Levermann, A., Montreuil, B., Nathwani, J., Nyer, R., Renn, O., Scharte, B., Scheffler, A., Schreurs, M., & Thiel-Clemen, T. (2014). Changing the resilience paradigm. Nature Climate Change, 4(6), 407-409. https://doi.org/10.1038/nclimate2227.
  9. International Organization for Standardization. (2018). Risk management — Guidelines (ISO 31000:2018). https://www.iso.org/standard/65694.html.
  10. (2012). Goddard Procedural Requirements P.6 SAFETY (GPR 7120.4D). https://lws.larc.nasa.gov/pdf_files/GPR%207120.4D%20Adm%20Ext_07282020.pdf.
  11. Office of the Deputy Assistant Secretary of Defense for Systems Engineering. (2017). DoD Risk, Issue, and Opportunity Management Guide for Defense Acquisition Programs. https:// com/wp-content/uploads/2017/07/DoD-Risk-Issue-and-Opportunity-Management- Guide-Jan-2017.pdf
  12. Sniedovich, M. (2016). Wald’s mighty maximin: a tutorial. International Transactions in Operational Research, 23(4), 625-653. https://doi.org/10.1111/itor.12248

Full text: PDF