Risk, Uncertainty and Everything Else

According to a model for homeland security risk analysis that is currently under consideration for use in supporting resource allocation decisions, the formula for the risk associated with a specified scenario is as follows:

Risk = C * L(S|A) * L(A)  (Equation 1)

where L(A) is the likelihood of an attack being attempted, L(S|A) is the likelihood of adversary success given attack, C is the consequences following a successful attack, and the total risk is obtained by summing the results of Equation 1 for all relevant scenarios.  At first glance, it would appear to the casual reader that this model is simply an implementation of risk measured in terms of expected loss, with the exception of the non-standard representation of L(.) for expressing the probability of the event contained within the parenthesis…

Click to Continue Reading...

[Read more →]

From 5-7 June 2008, I will be attending the “Critical Infrastructure Protection: Metrics and Tools” workshop sponsored by The Center for Homeland Defense and Security, Naval Postgraduate School, in Monterey, CA.

The agenda for this conference is as follows…

Click to Continue Reading...

[Read more →]

To follow up on my previous post regarding the work of Peter Sandman, I can’t help but advertise his short, yet important article entitled “Risk Words You Can’t Use” published in the August 2005 issue of The Synergist.  While this article is a quick read, I will distill it down further and caveat some with my personal experience:

• Conservative: To risk people, conservative means an overestimate of risk.  To laypeople, a “conservative” estimate is a low estimate.  So whereas a risk person would use conservative to overstate the risk, a layperson (or perhaps decision maker) may interpret the message to be an understatement of risk, and thereby think that the risk could be much worse.  Now, engineers and scientists understand what is meant by the

[Read more →]

For those unfamiliar with this description of risk, check out the website maintained by Peter Sandman.  Dr. Sandman is a scholar on risk communication and risk perception, and has made a name for himself via the concept “Risk = Hazard + Outrage.”  He has published some very interesting things, one of which can be found on my list of 100 books to review.  A selection of his works is available electronically on his curriculum vitae.

Back to the formula “Risk = Hazard + Outrage”…  This is not a mathematical formula in any strict sense of the word.  Rather it is conceptual in nature, where the “risk” is defined by the objective nature of the “hazard” and augmented by the “outrage” felt by the individuals exposed…

Click to Continue Reading...

[Read more →]

For those of you doing research into anything that requires a literature review, it pays to check out the types of work your Chinese research counterparts have published on in the Chinese academic literature.  There are two really good full-text databases out there for Chinese academic journals:

• Wanfang Data: According to the Wanfang data website, “as an affiliate of Chinese Ministry of Science & Technology, Wanfang Data has been the leading information provider in China since 1950s. With a wide range of database resources and value-added services, Wanfang Data has become a gateway to understand Chinese culture, medicine, business, science, etc.”  I personnally find this particular database to be very user friendly and English-language friendly.  The problem is that I don’t know of any scholarly institution with access…

[Read more →]

What is an “emerging threat”? Or even more generally speaking, what is a “threat” in the first place?

There are numerous definitions proposed and used for the word “threat” and its synonym “hazard”, and I leave it to readers of this blog (and myself) to explore the myriad definitions for such terms as these described in the SARMAPedia just to see what I mean (this website is part of the Security Analysis and Risk Management Association, or SARMA, initiative to develop a common lexicon; participation is encouraged).

For simplicity, let’s go with the following simple and generic definition of threat: a threat is a source of potential harm. Of course whether or not something is harmful is in the eye of the beholder, but for…

Click to Continue Reading...

[Read more →]

For those interested in exploring the latest research on risk analysis in the contexts of homeland security, defense, or intelligence, check out the following academic journals:

• Risk Analysis: An International Journal (Blackwell Publishing)
• The Journal of Risk and Insurance (Blackwell Publishing)
• Journal of Risk and Uncertainty (Springer)
• Journal of Risk Research (Taylor & Francis)
• Risk Management: An International Journal (Palgrave Macmillan)
• International Journal of Risk Assessment and Management (Inderscience)
• Security Journal

[Read more →]