Possible Does Not Mean Useful: The Role of Probability of Attack in Security Risk Management
Open Access
- 4 November 2022
- journal article
- research article
- Published by Taylor & Francis in Nuclear Science and Engineering
- Vol. 197 (sup1) , S80-S94
Abstract
Providing adequate security to civilian nuclear materials and facilities exemplifies the long-standing, dynamic challenge of addressing the potential for facility damage under operational uncertainty. Estimating attack likelihood with enough precision to be useful and actionable for security risk management is philosophically, scientifically, and practically challenging. In response, this paper discusses the conceptual and analytical shortcomings of various approaches to calculating the likelihood of attack as a foundational element of security risk management. From these shortcomings emerge a set of characteristics that can guide the creation of alternative concepts that provide more robust and actionable security risk management approaches better aligned with the Ievolutionary growth in civilian nuclear facilities. Such broader conceptions would support movement from traditional interpretations of probability of attack toward more nuanced and complex depictions to enhance security risk management.Keywords
This publication has 13 references indexed in Scilit:
- A framework for modeling and assessing system resilience using a Bayesian network: A case study of an interdependent electrical infrastructure systemInternational Journal of Critical Infrastructure Protection, 2019
- Making Terrorism Risk Analysis Less Harmful and More Useful: Another TryRisk Analysis, 2011
- Letter to the EditorRisk Analysis, 2011
- Risk-based cost-benefit analysis for security assessment problems2010
- How Probabilistic Risk Assessment Can Mislead Terrorism Risk AnalystsRisk Analysis, 2010
- Some Limitations of “Risk = Threat × Vulnerability × Consequence” for Risk Analysis of Terrorist AttacksRisk Analysis, 2008
- Security Risk Assessment and Management2007
- Perception of RiskScience, 1987
- Comprehensive safeguards evaluation methods and societal risk analysis1982
- On The Quantitative Definition of RiskRisk Analysis, 1981