The defined datamodels are useful for the Risk Assessment representation inside a water critical infrastructure, considering the modelling of cascading effects. This entities are most of them derived from ISO standards on Risk Assessment.
The following entity types are available:
-
Asset. An item of value to stakeholders. An asset may be tangible (e.g., a physical item such as hardware, firmware, computing platform, network device, or other technology component) or intangible (e.g., humans, data, information, software, capability, function, service, trademark, copyright, patent, intellectual property, image, or reputation). The value of an asset is determined by stakeholders in consideration of loss concerns across the entire system life cycle. Such concerns include but are not limited to business or mission concerns.
-
CyberAnalysis. Entity that represents analysis performed by digital tools to detect for example, network traffic anomalies
-
Exposure. This entity contains a harmonised description of a generic Exposure Entity made for the Risk Assessment domain.
-
GISData. This entity contains a harmonised description of generic GISData made for the Risk Assessment domain.
-
Hazard. This entity contains a harmonised description of a generic Hazard entity made for the Risk Assessment domain.
-
Measure. Specific measure translated into actions to be performed into the different systems
-
Mitigation. The mitigation of consequences reduces the risk after an event has occurred. Therefore, this risk reduction measure is not suitable for the reduction of the likelihood of events but for the reduction of the negative consequences. Examples for consequence mitigation measures could be e.g. the construction of connection pipes to the neighbor water supplier(s) to get water from them in case of a breakdown of the own water supply, the construction of wells for an emergency supply or signing of contracts with organizations providing small mobile emergency water treatment plants.
-
NetworkServiceAlert. Data model for the qualification and reporting of those alerts in a network service and its relation to the corresponding mitigation measures
-
Risk. Effect of uncertainty on objectives. An effect is a deviation from the expected—positive and/or negative. Objectives can have different aspects (such as financial, health and safety, and environmental goals) and can apply at different levels (such as strategic, organization-wide, project, product and process). Risk is often characterized by reference to potential events and consequences, or a combination of these. Risk is often expressed in terms of a combination of the consequences of an event (including changes in circumstances) and the associated likelihood of occurrence. Uncertainty is the state, even partial, of deficiency of information related to, understanding or knowledge of, an event, its consequence, or likelihood.
-
Vulnerability. This entity contains a harmonised description of a generic Vulnerability Entity made for the Risk Assessment domain.
Link to the 7 current contributors of the data models of this Subject.
You can raise an issue or submit your PR on existing data models