Risk Assessment Methodology Based on the NISTIR 7628 Guidelines

Conference · Tue Jan 01 04:00:00 EST 2013

OSTI ID:1072138

Abercrombie, Robert K ^[1]; Sheldon, Frederick T ^[1]; Hauser, Katie R ^[1]; Lantz, Margaret W ^[1]; Mili, Ali ^[2]

---

1. ORNL
2. New Jersey Insitute of Technology

Earlier work describes computational models of critical infrastructure that allow an analyst to estimate the security of a system in terms of the impact of loss per stakeholder resulting from security breakdowns. Here, we consider how to identify, monitor and estimate risk impact and probability for different smart grid stakeholders. Our constructive method leverages currently available standards and defined failure scenarios. We utilize the National Institute of Standards and Technology (NIST) Interagency or Internal Reports (NISTIR) 7628 as a basis to apply Cyberspace Security Econometrics system (CSES) for comparing design principles and courses of action in making security-related decisions.

• Research Organization: Oak Ridge National Laboratory (ORNL)
• Sponsoring Organization: ORNL work for others
• DOE Contract Number: AC05-00OR22725
• OSTI ID: 1072138
• Country of Publication: United States
• Language: English

Related Subjects

Algorithms
Cyber Security Metrics
Design
Economics
Experimentation
Information Security
Measurement
Performance
Reliability
Risk Management
Security
Theory
Verification