1 / 25

CIRAS final conference I ntroduction to the demo

The CIRAS Tool provides an objective way to assess the effectiveness of different security measures for critical infrastructures, including a cost-benefit evaluation and qualitative criteria assessment. It integrates with OSCAD and allows for the assessment of combined risks.

lperras
Download Presentation

CIRAS final conference I ntroduction to the demo

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. CIRAS final conference Introduction to the demo Katowice, June 8th, 2016 Jose-Ramon Martinez-Salio, ATOS CIRAS Technical Manager

  2. Objectives of CIRAS tool

  3. Objectives of CIRAS tool (1/2) • To provide a more objective way of assessment the effectiveness of different Security Measures Alternatives • To include in the risk assessment an objective evaluation of qualitative criteria* of the Security Measures *Societal, political, ethical, etc

  4. Objectives of CIRAS tool (2/2) • To have in the same toolset a heuristic assessment combined with a cost-benefit objective evaluation and also qualitative criteria assessment of the Security Measures • To assess the combined risks of Critical Infrastructures that depend on each other

  5. CIRAS and OSCAD • CIRAS toolset and OSCAD integrate and combine its operations during the functionality • CIRAS toolset uses, creates and deletes OSCAD dictionary values for Critical Infrastructures, Threats and Security Measures. • CIRAS assessment include integration with OSCAD analyses • Exporting the chosen alternatives to be evaluated • Importing the results of OSCAD • Exporting CIRAS assessments results to OSCAD

  6. MeettheCirastool

  7. Meet the tool • Cirastoolis a Web client accesible through internet • It uses secure “SSL” protocol (https) https://cirasdss.atosresearch.eu/ValueSec_demo/

  8. Roles • Toolhavetwo roles • ADMIN: Has theright to manage data and users • USER: Isthe final user

  9. Main functionalities • Tool have three main functionalities • Assets Management • Decision Support System • User Management

  10. 1. Assets management

  11. Main functionalities:Assets Management Assets Management allow user to manage dictionary database for: • Create/update/delete Critical infrastructures • Handle interdependencies of critical infrastructures • Create/delete threats • Create/delete Security Measures • Create/delete SMA

  12. Main functionalities:Assets Management: SMA SMA (Security Measures Alternatives) are the central objects of CIRAS tool • User has to select UP to five SMAs • Inside SMA user will choose any number of Security Measures • CIRAS assessment will be the comparison of these SMAs using four possible assessments: • Heuristic risk analysis • Cost and benefit analysis • Qualitative criteria impact analysis (2 possible assessments)

  13. Main functionalities:Assets Management: SMAChoosing Security Measures Assets Management allow user to choose what Security Measures to asset for each SMA

  14. 2. Decision support system

  15. Main functionalities:Decision Support System Decision Support System: The central objective of CIRAS. • Userstart by selecting up to five SMA 2. User can then start making the Assessments

  16. Main functionalities:RiskReductionAssessment • Risk Reduction Assessment (RRA) is the first Assessment available. User can make a heuristic assessment of SMAs

  17. Main functionalities:Cost and Benefit Assessment Cost and Benefit Assessment (CBA) allows the user to evaluate the Security Measures for any number of years combining : • Cost and BenefitBreakdownStructure • Investment Costs, Operating Cost and Future Benefits

  18. Main functionalities:Qualitative Criteria Assessment • Qualitative Criteria Assessment (QCA) allows a numeric evaluation of different SMAs based on social “costs”. • SMAs are evaluated based on categories and criteria. • There are two alternative analysis available: • Utility Function Based Analysis (UFBA) • Modified Analytic Hierarchy Process (MAHP)

  19. Main functionalities:Qualitative Criteria Assessment:Utility Function Based Analysis • Utility Function Based Analysis (UFBA) allows a objective evaluation of different SMAs based on: • Selection categories and qualitative criteria • Selection of possible “killer criteria” • Assignment of “utility functions” • Weighing of the Criteria

  20. Main functionalities:Qualitative Criteria Assessment:Modified Analytic Hierarchy Process • Modified Analytic Hierarchy Process (MAHP) allows a objective evaluation of different SMAs based on the comparison of Categories, Criteria and the Security Measures of the SMA • Comparison is made on perceived level of strengthbetween pairs of values

  21. Main functionalities:Aggregated results • Aggregated results summarizes the results of all assessments in two levels: • Individual SMA for all assessments • Global SMA comparison • Results can be seen in various formats: • Figures • Graphics • PDF Summary (1 page) for individual SMA • PDF with details for individual SMA • Complete PDF for all SMA considered

  22. 3. Usermanagement

  23. Main functionalities:User Management • Only ADMIN can access user management

  24. Talking is good, a demo is better

  25. Thankyouforyourattention! Jose-Ramon Martinez Technical Manager ATOS Spain jose.martinezs@atos.net www.cirasproject.eu Co-funded by the Prevention, Preparedness and Consequence Management of Terrorism and other Security-related Risks Programme of the European Union

More Related