skip to main content
OSTI.GOV title logo U.S. Department of Energy
Office of Scientific and Technical Information

Title: Addressing Consequence within Operational Risk: An Approach for Understanding an Organization’s Unique Infrastructure Environment

Conference ·
OSTI ID:2006791

The endeavor of tackling operational risk focused on consequences is challenging even for the most resourced entity but can be advanced though a simplified approach: identifying, binning, and prioritizing the infrastructure environment. While no two entities within a single element of the 16 critical infrastructure sectors are exactly alike when it comes to risk, there is a basic process to move toward a greater understanding of operational risk through becoming more informed about the infrastructure landscape in which the entity exists. The process starts with bringing internal and external stakeholders and subject matter experts together to analyze key areas such as Information Technology (IT) and Operational Technology (OT) components and points of convergence, analyzing internal and external cyber and physical dependencies, accounting for explosive growth in devices and wireless technology, and leveraging the contributions of people inside and outside the operational environment. Attaining a common understanding of the infrastructure landscape as part of addressing consequences within operational risk is not easy to do or resource light, but the process outlined provides the framework to further any entity’s efforts in this space.

Research Organization:
Idaho National Laboratory (INL), Idaho Falls, ID (United States)
Sponsoring Organization:
78
DOE Contract Number:
DE-AC07-05ID14517
OSTI ID:
2006791
Report Number(s):
INL/CON-23-74142-Rev000
Resource Relation:
Conference: Critical Infrastructure Protection and Resilience Europe, Prague, Czech Republic, 10/03/2023 - 10/05/2023
Country of Publication:
United States
Language:
English