Risk Analysis

From CIPedia
Revision as of 19:17, 6 March 2020 by Eluiijf (talk | contribs) (→‎Czech Republic)
Jump to navigation Jump to search

Definitions

European Definitions

Council of Europe

Risk analysis is the determination of the likelihood of an event (probability) and the consequences of its occurrence (impact) for the purpose of comparing possible risks and making risk management decisions. [1]


Council Directive 2008/114/EC

The consideration of relevant threat scenarios, in order to assess the vulnerability and the potential impact of disruption or destruction of critical infrastructure. [2]


ENISA

Risk Analysis is the systematic use of information to identify sources and to estimate the risk (refers to ISO/IEC Guide 73). [3]


European Project Definitions

CIPRNet project

The CIPRNet project [4] uses the following definition:

Risk analysis is the process to comprehend the nature of risk and to determine the level of risk.



National Definitions

Argentina

Análisis de riesgo: Conjunto de acciones necesarias para describir y caracterizar las amenazas y las vulnerabilidades. [5]




Australia

Risk analysis is a systematic use of available information to determine how often specified events may occur and the magnitude of their likely consequences. [6]


Process to comprehend the nature of risk and to determine the level of risk. [7]


Austria

Risikoanalyse die Prüfung relevanter Bedrohungsszenarien, um die Schwachstellen und mögliche Auswirkungen einer Störung oder Zerstörung kritischer Infrastrukturen zu bewerten. [8]



Belgium

Risicoanalyse: bestudering van relevante dreigingsscenario’s om de kwetsbaarheid en de mogelijke gevolgen van de verstoring of vernietiging van kritieke infrastructuur te beoordelen. [9]



Analyse de risques: examen des scénarios de menace pertinents destiné à évaluer les vulnérabilités d’infrastructures critiques et les impacts potentiels de leur arrêt ou destruction. [10]



Bosnia and Herzegovina

Analiza rizika je proces razumijevanja prirode rizika i utvrđivanja nivoa rizika. (ISO 31010) [11]



Brazil

Análise de riscos: análise e avaliação das vulnerabilidades das redes e dos sistemas que suportam a oferta de serviços, fundamentadas na hierarquização dos elementos necessários à prestação dos serviços. [12]


Análise de riscos: Identificação e avaliação tanto dos tipos de ameaça como dos elementos em risco, dentro de um determinado sistema ou região geográfica definida. [13]



Bulgaria

анализ на риска означава отчитане на съответните сценарии за действие при различни заплахи, с цел да се направи оценка на уязвимостта и на потенциалните последици от наруша¬ ването или унищожаването на критична инфраструктура. [14]



Canada

A process to comprehend the nature of a risk and to determine its level. [15]

Processus mis en œuvre pour comprendre la nature d’un risqué et pour déterminer son niveau. [16]



Colombia

Análisis de Riesgos: El análisis de riesgos establece una valoración y una priorización de los riesgos, determina el impacto y la probabilidad del riesgo. Dependiendo de la información disponible pueden emplearse desde modelos de simulación, hasta técnicas colaborativas. [17]



Croatia

Analiza rizika označava razmatranje mogućih scenarija prijetnji kako bi se ocijenile ranjivosti i mogući učinak poremećaja u radu kritične infrastrukture ili njezina uništenja. [18]

Risk analysis indicates consideration of possible scenarios of threats to evaluate the vulnerability and the potential impact of disturbances in the critical infrastructure or its destruction.



Analiza rizika znači razmatranje odgovarajućih scenarija opasnosti kako bi se ocijenile slabosti i mogući učinak poremećaja u radu ili uništenja kritične infrastrukture. [19]



Cyprus

Ως «ανάλυση κινδύνων» νοείται η ανάλυση των σχετικών σεναρίων περί απειλών, προκειμένου να αξιολογηθούν τα τρωτά σημεία και οι δυνητικές επιπτώσεις της διακοπής λειτουργίας ή της καταστροφής υποδομών ζωτικής σημασίας.[20]

(equals EU definition)



Czech Republic

Analýza rizik: Proces pochopení povahy rizika a stanovení úrovně rizika. [21]

Risk analysis: Process of understanding the nature of risks and establishing a risk level. [21]


Proces pochopení povahy rizika a stanovení úrovně rizika. [22]

Process of understanding the nature of risks and establishing a risk level. [23]



Analýzou rizik zvážení relevantních scénářů hrozeb s cílem posoudit zranitelnost a možný dopad narušení nebo zničení kritické infrastruktury. [24]



Denmark

Risikoanalyse: overvejelse af relevante trusselsscenarier for at vurdere sårbarheden og de potentielle konsekvenser af, at kritisk infrastruktur afbrydes eller ødelægges. [25] [26]


Risikoanalysen fastlægger, hvad det kræver for redningsberedskabet at håndtere de identificerede risici gennem to trin, scenarieanalyse og kapacitetsanalyse. [27]



El Salvador

Análisis de riesgo: En su forma más simple es el postulado de que el riesgo es el resultado de relacionar la amenaza y la vulnerabilidad de los elementos expuestos, con el fin de determinar los posibles efectos y consecuencias sociales, económicas y ambientales asociadas a uno o varios fenómenos peligrosos. Cambios en uno o más de estos parámetros modifican el riesgo en sí mismo, es decir, el total de pérdidas esperadas y consecuencias en un área determinada. [28]



Estonia

Riskianalüüs” – asjakohaste ohustsenaariumitega arvestamine, eesmärgiga hinnata haavatavust ning elutähtsate infrastruktuuride kahjustada saamise või hävimise võimalikku mõju. [29]



Finland

Riskianalyysi: toiminta, jossa tunnistetaan riskit ja arvioidaan vahinkotapahtuman todennäköisyys sekä odotettavissa olevat vahingot.

Risk analysis is the action for identifying risk and estimating the probability of a damaging event as well as anticipated damages. -unofficial translation- [30]


Riskianalyysillä asiaa koskevien uhkakuvien tarkastelua elintärkeän infrastruktuurin haavoittuvuuden ja sen vahingoittumisen tai tuhoutumisen mahdollisten seurausten arvioimiseksi. [31]



France

Analyse de risques: examen des scénarios de menace pertinents destiné à évaluer les vulnérabilités d’infrastructures critiques et les impacts potentiels de leur arrêt ou destruction. [32]



Gambia

Risk analysis: Process to comprehend the nature of risk and to determine the level of risk. [33]

Risk analysis includes risk estimation.

Germany

Risikoanalyse die Prüfung relevanter Bedrohungsszenarien, um die Schwachstellen und mögliche Auswirkungen einer Störung oder Zerstörung kritischer Infrastrukturen zu bewerten. [34]


Risikoanalyse ist die systematisches Verfahren zur Bestimmung der Eintrittswahr scheinlichkeit eines bestimmten Schadens an einem Schutzgut unter Berücksichtigung des potentiellen Schadensausmaßes. [35]


Risikoanalyse: Hierunter ist ein systematisches Verfahren zur Bestimmung des Risikos zur verstehen. [36]


Risikoanalyse ist der komplette Prozess um Risiken zu beurteilen (identifizieren, einschätzen und bewerten) sowie zu behandeln. [37]



Greece

Ως «ανάλυση κινδύνων» νοείται η ανάλυση των σχετικών σεναρίων περί απειλών, προκειμένου να αξιολογηθούν τα τρωτά σημεία και οι δυνητικές επιπτώσεις της διακοπής λειτουργίας ή της καταστροφής υποδομών ζωτικής σημασίας.[38] [39]

(equals EU definition)



Hungary

Kockázatelemzés: a vonatkozó fenyegetettségi forgató¬ könyvek vizsgálata a kritikus infrastruktúrák sebezhetősé¬ gének, valamint a megzavarásuk vagy megsemmisítésük által okozott potenciális hatásnak az értékelése céljából. [40]



India

Risk analysis is the process of identifying security risks, determining their magnitude, and identifying areas needing safeguards. [41]



Ireland

Risk analysis means consideration of relevant threat scenarios, in order to assess the vulnerability and the potential impact of disruption or destruction of critical infrastructure. [42]



Italy

Analisi dei rischi: valutazione della vulnerabilita' di una ICE rispetto alle diverse possibili minacce e prevedibili conseguenze del danneggiamento o distruzione della stessa, in termini di effetti negativi esterni e intrinseci. [43] [44]



Latvia

Apdraudējumu analīze ir apsvērumi par attiecīgiem apdraudējuma scenārijiem, lai izvērtētu neaizsargātības pakāpi un ietekmi, ko varētu radīt kritiskās infrastruktūras darbības traucējumi vai tās iznīcināšana. [45]



Lithuania

Rizikos analizė – atitinkamų grėsmės scenarijų nagrinėjimas, siekiant įvertinti ypatingos svarbos infrastruktūros objekto pažeidžiamumą ir veikimo sutrikdymo arba sunaikinimo galimą poveikj. [46]



Luxembourg

Analyse de risques: examen des scénarios de menace pertinents destiné à évaluer les vulnerabilities d'infrastructures critiques et les impacts potentiels de leur arrêt ou destruction. [47] [48]


Malta

Analiżi tar-riskju tfisser il-konsiderazzjoni ta’ xenarji ta’ theddid relevanti, sabiex tiġi valutata l-vulnerabbiltà u limpatt potenzjali ta’ interuzzjoni jew qerda ta’ infrastruttura kritika. [49]



Mexico

Análisis (Evaluación) Del Riesgo: En su forma más simple, es el postulado de que el riesgo resulta de relacionar la amenaza y la vulnerabilidad de los elementos expuestos, con el fin de determinar los posibles efectos y consecuencias sociales, económicas y ambientales asociadas a uno o varios fenómenos peligrosos en un territorio y con referencia a grupos o unidades sociales y económicas particulares. [50]

Cambios en uno o más de estos parámetros modifican el riesgo en sí mismo, es decir, el total de pérdidas esperadas y las consecuencias en un área determinada.


Morocco

Analyse des risques: Ensemble des activités coordonnées visant à diriger et piloter un organisme vis-à-vis du risque afin d’améliorer la sécurisation des SI, de justifier le budget alloué à la sécurisation du SI et prouver la crédibilité du système d’information à l’aide des analyses effectuées. [51]

Risk analysis: A set of coordinated activities aimed at directing and managing an organization with regard to risk in order to improve the security of IS, to justify the budget allocated to securing the IS and to prove the credibility of the information system Using the analyzes performed.


Analyse des risques: Utilisation systématique d’informations pour identifier les sources et pour estimer le risque. [52]



Netherlands

Risk analysis is a method which takes stock of the risk, which risk factors are unacceptable, and which measures can mitigate the risk.

Risicoanalyse is een methode die inventariseert welke risico's er zijn, welke daarvan onacceptabel zijn en welke maatregelen de risico's kunnen reduceren. [53]


Risicoanalyse: bestudering van relevante dreigingsscenario’s om de kwetsbaarheid en de mogelijke gevolgen van de verstoring of vernietiging van kritieke infrastructuur te beoordelen. [54]


[Dutch] Risicoanalyse is het proces van begrijpen en duiden van het risico en het vaststellen van de risico’s en de zwaarte daarvan. [55]



[HEALTH sector]
Risicoanalyse: Een proces dat bestaat uit drie componenten: risicoschatting, risicomanagement of manipulatie en risicocommunicatie.

Risk analysis: A process consisting of three components: Risk assessment, risk management and risk communication). [56]


Risicoanalyse: Een weging van de kansen en gevolgen van een ongewenste gebeurtenis. [57]

Het leidt tot inzicht in de ernst en waarschijnlijkheid van die gebeurtenis en in de weerbaarheid van een organisatie tegen bedreigingen van vastgestelde belangen en uitval en verstoringen van vitale processen. Die weerbaarheid wordt afgemeten aan de maatregelen die zijn genomen om de kans op verstoring te verminderen en de gevolgen beheersbaar te maken.

Peru

Análisis de Riesgos: Procedimiento técnico, que permite identificar y caracterizar los peligros, analizar las vulnerabilidades, calcular, controlar, manejar y comunicar los riesgos, para lograr un desarrollo sostenido mediante una adecuada toma de decisiones en la Gestión del Riesgo de Desastres. [58]

El Análisis de Riesgo facilita la determinación del nivel del riesgo y la toma de decisiones.

Philippines

Risk Analysis – Is the process of identifying the risks to system security and determining the likelihood of occurrence, the resulting impact, and the additional safeguards that mitigate this impact. [59]



Poland

Analiza ryzyka oznacza uwzględnianie stosownych metod postępowania w przypadku zaistnienia zagrożeń, aby ocenić słabe punkty i potencjalne skutki zakłócenia lub zniszczenia infrastruktury krytycznej. [60]



Portugal

Análise de risco, a ponderação dos cenários de ameaça relevantes, a fim de avaliar a vulnerabilidade e o potencial impacto da perturbação ou destruição de uma infra-estrutura crítica. [61]



Romania

Analiză de risc înseamnă analizarea scenariilor de amenințări semnificative, pentru a evalua vulnerabilitatea și impactul potențial al perturbării sau al distrugerii infrastructurii critice. [62]



Slovakia

Analýza rizík je zváženie relevantných scenárov hrozieb s cieľom posúdiť zraniteľné miesta a potenciálny vplyv naru¬ šenia alebo zničenia kritickej infraštruktúry. [63]


Analýza rizík: Proces podrobnej identifikácie rizík, určovania ich zdrojov a veľkosti, skúmania ich vzájomných vzťahov a predpovedania rozsahu negatívneho vplyvu na systém v prípade vzniku krízovej situácie. [64]



Slovenia

Analiza tveganja pomeni obravnavo ustreznih scenarijev nevarnosti, da se ocenijo šibke točke in morebitne posledice okvare ali uničenja kritične infrastrukture. [65]



Spain

Análisis de riesgos, el estudio de hipótesis de amenazas posibles, para evaluar las vulnerabilidades y las posibles repercusiones de la perturbación o destrucción de infraestructuras críticas. [66]


Análisis de riesgos: el estudio de las hipótesis de amenazas posibles necesario para determinar y evaluar las vulnerabilidades existentes en los diferentes sectores estratégicos y las posibles repercusiones de la perturbación o destrucción de las infraestructuras que le dan apoyo. [67]



Sweden

Riskanalys: övervägande av relevanta hotbilder, för att bedöma sårbarhet och potentiella konsekvenser av driftsstörning eller förstörelse av kritisk infrastruktur. [68]



Switzerland

Die Risikoanalyse erfasst und beschreibt systematisch die Risiken in einem betrachteten System. [69]

Dazu gehört die Einschätzung der Höhe der Risiken, oft in Form einer Einstufung der betrachteten Szenarien bzgl. ihrer Eintrittswahrscheinlichkeit und Schadensausmasses. Die Risikoanalyse befasst sich mit der Frage «was kann passieren?».

L’analyse des risques recense et décrit de manière systématique les risques dans un système donné. [70]

L’appréciation du niveau des risques, souvent sous forme d’une classification des scénarios considérés en function de leur [Probability|probabilité]] d’occurrence et de l’ampleur des dommages envisagés en fait partie. L’analyse des risques traite de la question «que peut-il arriver?».

L'analisi dei rischi rileva e descrive sistematicamente i rischi in un determinato sistema. [71]

Vi rientra la stima del livello dei rischi, spesso in forma di una classificazione degli scenari considerati in funzione della loro frequenza e dell’entità dei danni. L'analisi dei rischi cerca di rispondere alla domanda «che cosa potrebbe succedere?».

United Kingdom

Risk analysis means consideration of relevant threat scenarios, in order to assess the vulnerability and the potential impact of disruption or destruction of critical infrastructure. [72]



United States

DHS
Risk Analysis is the systematic examination of the components and characteristics of risk. [73]


NIST
The process of identifying risks to organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, and the Nation, arising through the operation of an information system. [74]



Uruguay

Análisis de riesgo: Método cualitativo o cuantitativo para la evaluación del impacto del riesgo en la toma de decisiones. [75]



Standard Definition

IETF

An assessment process that systematically (a) identifies valuable system resources and threats to those resources, (b) quantifies loss exposures (i.e., loss potential) based on estimated frequencies and costs of occurrence, and (c) (optionally) recommends how to allocate available resources to countermeasures so as to minimize total exposure. [76]


ISO/IEC 27000:2014 and ISO 31000:2009

Process to comprehend the nature of risk and to determine the level of risk (based on the ISO Guide 73:2009) [77] [78]

Level of risk is expressed in terms of the combination of consequences and their likelihood.


See also

Notes

  1. ↑ GLOSSAIRE MULTILINGUE DE LA GESTION DU RISQUE pour usagers francophones (2007)/European Centre of Technological Safety (TESEC) - TESEC-EUR-OPA 2001)
  2. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  3. ↑ ENISA Risk Glossary
  4. ↑ http://www.ciprnet.eu/
  5. ↑ SUBSECRETARÍA DE PROTECCIÓN CIVIL Y ABORDAJE INTEGRAL DE EMERGENCIAS Y CATÁSTROFES (1/2015)
  6. ↑ Australian Emergency Management Glossary, Emergency Management Australia (1998)
  7. ↑ Australia AS NZS 5050 (2010)
  8. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  9. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  10. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  11. ↑ RADNA VERZIJA OSOBLJA KOMISIJE: Procjena rizika i mapiranje smernice za upravljanje katastrofama
  12. ↑ REGULAMENTO SOBRE GESTÃO DE RISCO DAS REDES DE TELECOMUNICAÇÕES E USO DE SERVIÇOS DE TELECOMUNICAÇÕES EM SITUAÇÕES DE EMERGÊNCIA E DESASTRES (2012)
  13. ↑ GLOSSÁRIO DE DEFESA CIVIL ESTUDOS DE RISCOS E MEDICINA DE DESASTRES, Ministério da Integração Nacional, Brazil
  14. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  15. ↑ Derived from ISO 31000:2009
  16. ↑ Vocabulaire de la gestion des urgencies/Emergency Management Emergency Management Vocabulary 281 (2012)
  17. ↑ Glosario Policia Colombia
  18. ↑ Zakon o kritičnim infrastrukturama (Critical infrastructure act), 2013, in Official Gazette, No 56/2013 (Croat.)
  19. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  20. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  21. ↑ 21.0 21.1 [1]
  22. ↑ Výkladový slovník kybernetické bezpečnosti (2013)
  23. ↑ Cyber Security Explanatory Glossary (2013)
  24. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  25. ↑ Bekendtgørelse om identifikation og udpegning af europæisk kritisk infrastruktur på energiområdet og vurdering af behovet for bedre beskyttelse (EPCIP-direktivet)
  26. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  27. ↑ HÅNDBOG I RISIKOBASERET DIMENSIONERING, Beredskabsstyrelsen, Denmark (2004)
  28. ↑ Glosario de Riesgo, Ministerio de Medio Ambiente y Recursos Naturales, El Salvador
  29. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  30. ↑ Vocabulary of Comprehensive Security. Helsinki (TSK 47) (2014)
  31. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  32. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  33. ↑ THE GAMBIA NATIONAL CYBERSECURITY STRATEGY (2019)
  34. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  35. ↑ Methode für die Risikoanalyse im Bevölkerungsschutz
  36. ↑ Glossar, Das Bundesamt für Bevölkerungsschutz und Katastrophenhilfe (BBK)
  37. ↑ BSI Glossary
  38. ↑ Προεδρικό Διάταγμα 39/2011 της Ελληνικής Δημοκρατίας που αφορά την προσαρμογή της ελληνικής νομοθεσίας προς τις διατάξεις τις οδηγίας 2008/114/ΕΚ του Συμβουλίου της Ευρωπαϊκής Ένωσης.
  39. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  40. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  41. ↑ India's DGQA Cyber Security Policy (2015)
  42. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  43. ↑ DECRETO LEGISLATIVO 11 aprile 2011 , n. 61 Attuazione della Direttiva 2008/114/CE recante l'individuazione e la designazione delle infrastrutture critiche europee e la valutazione della necessita' di migliorarne la protezione. (11G0101
  44. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  45. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  46. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  47. ↑ Règlement grand-ducal du 12 mars 2012 portant application de la directive 2008/114/CE du Conseil du 8 décembre 2008
  48. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  49. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  50. ↑ El Glosario Centro Nacional de prevencion de desastres (CENAPRED)
  51. ↑ STRATEGIE NATIONALE EN MATIERE DE CYBERSECURITE, Morocco, 2011
  52. ↑ DIRECTIVE NATIONALE DE LA SECURITE DES SYSTEMES D'INFORMATION, Marocco 2013
  53. ↑ Zakboekje Preventie Cybercrime (2008
  54. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  55. ↑ Risicobeoordeling 16.0: Een kansrijk kader; Theorie achter het risicomanagementproces en leidraad voor risicobeoordeling, June 2015
  56. ↑ Patiëntveiligheid Definitielijst (2005)
  57. ↑ Handreiking Cybercrime (2012)
  58. ↑ El Centro Nacional de Estimación, Prevención y Reducción del Riesgo de Desastres - CENEPRED, Glosario de Términos, Peru
  59. ↑ DND GLOSSARY OF CYBER SECURITY TERMS (v.4)
  60. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  61. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  62. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  63. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  64. ↑ BEZPEČNOSTNÁ RADA SLOVENSKEJ REPUBLIKY
  65. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  66. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  67. ↑ 7630 Ley 8/2011, de 28 de abril, por la que se establecen medidas para la protección de las infraestructuras críticas.
  68. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  69. ↑ Leitfaden Schutz kritischer Infrastrukturen 2015 / Glossar der Risikobegriffe, Bundesamt für Bevölkerungsschutz BABS, 29.4.2013
  70. ↑ Guide pour la protection des infrastructures critiques
  71. ↑ Glossario sui rischi, Ufficio federale della protezione della popolazione UFPP, 29.4.2013
  72. ↑ Council Directive 2008/114/EC of 8 December 2008 on the identification and designation of European critical infrastructures and the assessment of the need to improve their protection.
  73. ↑ DHS Risk Lexicon 2010 Edition, September 2010
  74. ↑ NISTIR 7298 rev 2: Glossary of Key Information Security Terms, May 2013
  75. ↑ Glossary CERTuy
  76. ↑ IETF RFC449 Internet Security Glossary 2
  77. ↑ ISO/IEC 27000:2014, Information technology -- Security techniques -- Information security management systems -- Overview and vocabulary
  78. ↑ ISO/IEC 31000:2009, Risk management -- Principles and guidelines


Retrieved from "https://websites.fraunhofer.de/CIPedia/index.php?title=Risk_Analysis&oldid=11779"