Difference between revisions of "Consequence"

From CIPedia
Jump to navigation Jump to search
m (→‎European Project Definitions)
Line 24: Line 24:
 
==== [[Australia]] ====
 
==== [[Australia]] ====
 
{{definition|Consequence is the outcome of an [[event]] or situation expressed qualitatively or quantitatively. <ref name="MAIMAus">[https://www.em.gov.au/Documents/Manual03-AEMGlossary.PDF Australian Emergency Management Glossary, Emergency Management Australia (1998)]</ref>}}One definition describes consequence in terms of a loss, injury, disadvantage or gain, a second definition defines it as the effects on persons, society, the environment and the economy. <br />
 
{{definition|Consequence is the outcome of an [[event]] or situation expressed qualitatively or quantitatively. <ref name="MAIMAus">[https://www.em.gov.au/Documents/Manual03-AEMGlossary.PDF Australian Emergency Management Glossary, Emergency Management Australia (1998)]</ref>}}One definition describes consequence in terms of a loss, injury, disadvantage or gain, a second definition defines it as the effects on persons, society, the environment and the economy. <br />
−
{{definition|Outcome of an [[event]] affecting objectives. <ref> [http://www.risknz.org.nz/files/3114/0868%2F4596%2F5050-2010.pdf Australia AS NZS 5050 (2010)]</ref>}}<br />
+
{{definition|Outcome of an [[event]] affecting objectives. <ref> [http://www.risknz.org.nz/files/3114/0868%2F4596%2F5050-2010.pdf Australia AS NZS 5050 (2010)]</ref>}}<br /><br/>
 +
==== [[Bosnia and Herzegovina]] ====
 +
{{definition|Posledice su negativni efekti katastrofe izraženi u pogledu ljudskih uticaja, ekonomskih i ekoloških uticaja, i političkih/društvenih uticaja. (ISO 31010)  <ref>[http://www.msb.gov.ba/PDF/EU_SMJERNICE_ZA_PRCJENU_RIZIKA21122015.pdf RADNA VERZIJA OSOBLJA KOMISIJE: Procjena rizika i mapiranje smernice za upravljanje katastrofama]</ref>}}<br/><br/>
 +
 
 
==== [[Canada]] ====
 
==== [[Canada]] ====
 
{{definition|Consequence is the outcome of an event or situation expressed qualitatively or quantitatively, being a loss, injury or disadvantage.<br/><br/>Consequence est le résultat d’une situation ou d’un évènement, exprimé qualitativement ou quantitativement, qu’il s’agisse d’une perte, d’une lésion ou d’un inconvénient. <ref name="Can"> [http://www.sse.gov.on.ca/mgs/onterm/Documents/Glossaries/EMO%20Glossary%20EN-FR.htm Ontario English-French Emergency Management Glossary of Terms (2011)]</ref>}}<br /><br />
 
{{definition|Consequence is the outcome of an event or situation expressed qualitatively or quantitatively, being a loss, injury or disadvantage.<br/><br/>Consequence est le résultat d’une situation ou d’un évènement, exprimé qualitativement ou quantitativement, qu’il s’agisse d’une perte, d’une lésion ou d’un inconvénient. <ref name="Can"> [http://www.sse.gov.on.ca/mgs/onterm/Documents/Glossaries/EMO%20Glossary%20EN-FR.htm Ontario English-French Emergency Management Glossary of Terms (2011)]</ref>}}<br /><br />
 
==== [[Czech Republic]] ====
 
==== [[Czech Republic]] ====
−
{{definition| Následek: Výsledek události působící na cíle. <ref>[http://www.govcert.cz/download/nodeid-561  Výkladový slovník kybernetické bezpečnosti (2013)]</ref> <br/><br/> Consequence is the result of an [[event]] which affects the objectives.<ref>[http://www.govcert.cz/download/nodeid-561  Výkladový slovník kybernetické bezpečnosti (2013)]</ref>}}<br/>
+
{{definition| Následek: Výsledek události působící na cíle. <ref>[http://www.govcert.cz/download/nodeid-561  Výkladový slovník kybernetické bezpečnosti (2013)]</ref> <br/><br/> Consequence is the result of an [[event]] which affects the objectives.<ref>[http://www.govcert.cz/download/nodeid-561  Výkladový slovník kybernetické bezpečnosti (2013)]</ref>}}<br/><br/>
 
==== [[Norway]] ====
 
==== [[Norway]] ====
 
{{definition|Konsekvenser er virkningene av den uønskede hendelsen på gitte samfunnsverdier. <ref>[https://www.dsb.no/globalassets/dokumenter/rapporter/nrb_2014.pdf DSB, National Risikobild 2014]</ref><br/><br/>Consequences are the effects of an adverse [[event]] on given societal assets. <ref>[http://www.dsbinfo.no/DSBno/2015/Andre/NationalRiskAnalysis2014/ DSB, National Risk Analysis 2014]</ref>}}<br/><br/>
 
{{definition|Konsekvenser er virkningene av den uønskede hendelsen på gitte samfunnsverdier. <ref>[https://www.dsb.no/globalassets/dokumenter/rapporter/nrb_2014.pdf DSB, National Risikobild 2014]</ref><br/><br/>Consequences are the effects of an adverse [[event]] on given societal assets. <ref>[http://www.dsbinfo.no/DSBno/2015/Andre/NationalRiskAnalysis2014/ DSB, National Risk Analysis 2014]</ref>}}<br/><br/>
Line 37: Line 40:
 
{{definition|Conseguenza: Le conseguenze descrivono l’insieme degli effetti di uno o più [[event|eventi]]. <ref>[http://www.bevoelkerungsschutz.admin.ch/internet/bs/it/home/themen/gefaehrdungen-risiken.parsysrelated1.49227.downloadList.52339.DownloadFile.tmp/20130422glossarit.pdf Glossario sui rischi, l’Ufficio federale della protezione della popolazione UFPP, 29.4.2013]</ref>}}
 
{{definition|Conseguenza: Le conseguenze descrivono l’insieme degli effetti di uno o più [[event|eventi]]. <ref>[http://www.bevoelkerungsschutz.admin.ch/internet/bs/it/home/themen/gefaehrdungen-risiken.parsysrelated1.49227.downloadList.52339.DownloadFile.tmp/20130422glossarit.pdf Glossario sui rischi, l’Ufficio federale della protezione della popolazione UFPP, 29.4.2013]</ref>}}
 
Possono essere negative (danni) o positive (benefici).
 
Possono essere negative (danni) o positive (benefici).
−
<br/>
+
<br/><br/>
  
 
====[[United Kingdom]]====
 
====[[United Kingdom]]====
−
{{definition|Consequence is [[impact]] resulting from the occurrence of a particular [[hazard]] or [[threat]], measured in terms of the numbers of lives lost, people injured, the scale of [[damage]] to property and the disruption to essential services and commodities. <ref> [https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/61046/EP_Glossary_amends_18042012_0.pdf Glossary - Revision to Emergency Preparedness, Cabinet Office (2012)]</ref>}}<br />
+
{{definition|Consequence is [[impact]] resulting from the occurrence of a particular [[hazard]] or [[threat]], measured in terms of the numbers of lives lost, people injured, the scale of [[damage]] to property and the disruption to essential services and commodities. <ref> [https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/61046/EP_Glossary_amends_18042012_0.pdf Glossary - Revision to Emergency Preparedness, Cabinet Office (2012)]</ref>}}<br /><br/>
−
 
 
 
==== [[United States]] ====
 
==== [[United States]] ====
 
===== [[DHS]] =====
 
===== [[DHS]] =====
Line 67: Line 69:
 
[[Category:Consequence]]
 
[[Category:Consequence]]
 
[[Category:Risk]]
 
[[Category:Risk]]
−
{{#set:defined by=ENISA|defined by=Australia|defined by=Canada|defined by=Czech Republic|defined by=Norway|defined by=Switzerland|defined by=United Kingdom|defined by=United States|defined by=ISO|defined by=Ontario}}
+
{{#set:defined by=ENISA|defined by=Australia|defined by=Bosnia and Herzegovina|defined by=Canada|defined by=Czech Republic|defined by=Norway|defined by=Switzerland|defined by=United Kingdom|defined by=United States|defined by=ISO|defined by=Ontario}}
  
 
[[Category:CIPRNet-Glossary]]
 
[[Category:CIPRNet-Glossary]]
 
{{#set:defined by=EU project}}
 
{{#set:defined by=EU project}}

Revision as of 20:48, 1 January 2017

The term “consequence” is not well-defined in the literature and confusion arises when compared to the terms "impact", "harm" or "effect". For example, the ISO definition found below is very general and does not distinguish between consequences for critical infrastructure, for people, for the environment, or for the economy. Such distinctions are required for two reasons:

  1. For the CIP domain, consequences for critical infrastructure are of supreme importance, and other consequences may be ignored for certain applications (for example, when assessing the consequences of cascading effects).
  2. For consequence analysis in the meaning of the ECI directive [1], assessment of consequences for people, the environment and the economy is needed according to the cross-cutting criteria mentioned there.

So far, we do not have a suggestion of specific terms for both cases. Thus the recommendation for the time being is to always clearly state if “consequence” or “consequence analysis” is being performed for CI alone or for use with the cross-cutting criteria.


Definitions

European Definitions

While the term is not officially defined in the ECI directive [1], cross-cutting criteria are mentioned as a metric to assess consequence.

ENISA

Outcome of an event (points to ISO/IEC Guide 73). [2]


European Project Definitions

CIPRNet project

The CIPRNet project [3] uses the following definition:

consequence: outcome of an event affecting objectives.


National Definitions

Australia

Consequence is the outcome of an event or situation expressed qualitatively or quantitatively. [4]

One definition describes consequence in terms of a loss, injury, disadvantage or gain, a second definition defines it as the effects on persons, society, the environment and the economy.

Outcome of an event affecting objectives. [5]



Bosnia and Herzegovina

Posledice su negativni efekti katastrofe izraženi u pogledu ljudskih uticaja, ekonomskih i ekoloških uticaja, i političkih/društvenih uticaja. (ISO 31010) [6]



Canada

Consequence is the outcome of an event or situation expressed qualitatively or quantitatively, being a loss, injury or disadvantage.

Consequence est le résultat d’une situation ou d’un évènement, exprimé qualitativement ou quantitativement, qu’il s’agisse d’une perte, d’une lésion ou d’un inconvénient. [7]



Czech Republic

Následek: Výsledek události působící na cíle. [8]

Consequence is the result of an event which affects the objectives.[9]



Norway

Konsekvenser er virkningene av den uønskede hendelsen på gitte samfunnsverdier. [10]

Consequences are the effects of an adverse event on given societal assets. [11]



Switzerland

Auswirkung: Die Auswirkungen beschreiben die Gesamtheit aller Folgen aus einem oder mehreren Ereignissen. [12]

Auswirkungen können sowohl negativ (Schaden) als auch positiv (Nutzen) sein.

Conséquence: Les conséquences décrivent l’ensemble des effets d’un ou de plusieurs événements. [13]

Les conséquences peuvent aussi bien être négatives (dommages) que positives (bénéfices).

Conseguenza: Le conseguenze descrivono l’insieme degli effetti di uno o più eventi. [14]

Possono essere negative (danni) o positive (benefici).

United Kingdom

Consequence is impact resulting from the occurrence of a particular hazard or threat, measured in terms of the numbers of lives lost, people injured, the scale of damage to property and the disruption to essential services and commodities. [15]



United States

DHS
Consequence is the effect of an event, incident, or occurrence, including the number of deaths, injuries, and other human health impacts along with economic impacts both direct and indirect and other negative outcomes to society (adapted from the 2010 DHS Risk Lexicon [16]).


Standard Definition

ISO/IEC 27000:2014 and ISO 31000:2009

The outcome of an event affecting objectives. [17] [18]

The standard notes that (a) an event can lead to a range of consequences, (b) a consequence can be certain or uncertain and in the context of Information Security is usually negative, (c) consequences can be expressed qualitatively or quantitatively and (d) initial consequences can escalate through knock-on effects.

See also

Notes

  1. ↑ Jump up to: 1.0 1.1 Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  2. Jump up ↑ ENISA Risk Glossary
  3. Jump up ↑ http://www.ciprnet.eu/
  4. Jump up ↑ Australian Emergency Management Glossary, Emergency Management Australia (1998)
  5. Jump up ↑ Australia AS NZS 5050 (2010)
  6. Jump up ↑ RADNA VERZIJA OSOBLJA KOMISIJE: Procjena rizika i mapiranje smernice za upravljanje katastrofama
  7. Jump up ↑ Ontario English-French Emergency Management Glossary of Terms (2011)
  8. Jump up ↑ Výkladový slovník kybernetické bezpečnosti (2013)
  9. Jump up ↑ Výkladový slovník kybernetické bezpečnosti (2013)
  10. Jump up ↑ DSB, National Risikobild 2014
  11. Jump up ↑ DSB, National Risk Analysis 2014
  12. Jump up ↑ Glossar der Risikobegriffe, Bundesamt für Bevölkerungsschutz BABS, 29.4.2013
  13. Jump up ↑ Glossaire des risques, Office fédéral de la protection de la population, 29.4.2013
  14. Jump up ↑ Glossario sui rischi, l’Ufficio federale della protezione della popolazione UFPP, 29.4.2013
  15. Jump up ↑ Glossary - Revision to Emergency Preparedness, Cabinet Office (2012)
  16. Jump up ↑ DHS Risk Lexicon 2010 Edition, September 2010
  17. Jump up ↑ ISO/IEC 27000:2014, Information technology -- Security techniques -- Information security management systems -- Overview and vocabulary
  18. Jump up ↑ ISO/IEC 31000:2009, Risk management -- Principles and guidelines
Retrieved from "https://websites.fraunhofer.de/CIPedia/index.php?title=Consequence&oldid=7272"