A NEW APPROACH TO RISK ASSESSMENT BASED ON THE SEMANTIC VALUE OF EXPRESSIONS

The framework takes into account non-quantifiable decision variables and dilemmas, and uncertainties related to input data. The RISKMAN model scheme consists of process description and a range of suggested evaluation criteria as well as guidelines on how is possible to perform the evaluation. In addition to guidelines on prioritizing and evaluating the different criteria, the interpretation and use of the numerical results is discussed. The framework also shows the follow-up management strategies based on the outcome of the evaluation. In short, it describes a possible way of following up the output of security risk assessments and the identified size of security risks. It involves different stakeholders and offers a transparent process for prioritizing, and finally, selecting security measures. In its simplest form, the whole evaluation should be conducted by security experts within the decision making procedures, making qualitative assessments according the offered criteria. This can be necessary as a first screening for choosing capacities for further decisions. The use of and the strengths and weaknesses of the framework should be pre-tested within the stage of planning process and simulation of predictable threats.