IDEAS home Printed from https://ideas.repec.org/a/eee/ijocip/v12y2016icp12-26.html
   My bibliography  Save this article

Current practices and challenges in industrial control organizations regarding information security incident management – Does size matter? Information security incident management in large and small industrial control organizations

Author

Listed:
  • Bartnes Line, Maria
  • Anne Tøndel, Inger
  • Jaatun, Martin G.

Abstract

This paper reports on the results of an interview study that surveyed current practices regarding information security incident management in small and large distribution system operators (DSOs) in the Norwegian electric power industry. The findings indicate that current risk perception and preparedness are low, especially among small electricity distribution system operators. Further, small distribution system operators rely heavily on their suppliers should incidents occur. At the same time, small distribution system operators are confident that they can handle the worst-case scenarios. This paper documents current perceptions and discusses the extent to which they are likely to hold given the transition towards smart electric grids. Several recommendations are provided based on the findings and the accompanying discussion. In particular, small distribution system operators should strengthen the collaboration with their information technology (IT) suppliers and other small distribution system operators. Furthermore, distribution system operators in general should establish written documentation of procedures, perform preparedness exercises and improve detection capabilities in control systems.

Suggested Citation

  • Bartnes Line, Maria & Anne Tøndel, Inger & Jaatun, Martin G., 2016. "Current practices and challenges in industrial control organizations regarding information security incident management – Does size matter? Information security incident management in large and small ," International Journal of Critical Infrastructure Protection, Elsevier, vol. 12(C), pages 12-26.
    • Handle: RePEc:eee:ijocip:v:12:y:2016:i:c:p:12-26
    DOI: 10.1016/j.ijcip.2015.12.003
    as

    Download full text from publisher

    File URL: http://www.sciencedirect.com/science/article/pii/S1874548215000815
    Download Restriction: Full text for ScienceDirect subscribers only
    File URL: https://libkey.io/10.1016/j.ijcip.2015.12.003?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    As the access to this document is restricted, you may want to search for a different version of it.

    References listed on IDEAS

    as
    1. Jaatun, Martin Gilje & Albrechtsen, Eirik & Line, Maria B. & Tøndel, Inger Anne & Longva, Odd Helge, 2009. "A framework for incident response management in the petroleum industry," International Journal of Critical Infrastructure Protection, Elsevier, vol. 2(1), pages 26-37.
    2. Thomas Diefenbach, 2009. "Are case studies more than sophisticated storytelling?: Methodological problems of qualitative empirical research mainly based on semi-structured interviews," Quality & Quantity: International Journal of Methodology, Springer, vol. 43(6), pages 875-894, November.
    3. Terje Aven & Ortwin Renn, 2010. "Risk Management and Governance," Risk, Governance and Society, Springer, number 978-3-642-13926-0, October.
    Full references (including those not matched with items on IDEAS)

    Citations

    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.
    as


    Cited by:

    1. Staves, Alexander & Anderson, Tom & Balderstone, Harry & Green, Benjamin & Gouglidis, Antonios & Hutchison, David, 2022. "A Cyber Incident Response and Recovery Framework to Support Operators of Industrial Control Systems," International Journal of Critical Infrastructure Protection, Elsevier, vol. 37(C).
    2. Shrestha, Manish & Johansen, Christian & Noll, Josef & Roverso, Davide, 2020. "A Methodology for Security Classification applied to Smart Grid Infrastructures," International Journal of Critical Infrastructure Protection, Elsevier, vol. 28(C).

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Sisira S. Withanachchi & Ilia Kunchulia & Giorgi Ghambashidze & Rami Al Sidawi & Teo Urushadze & Angelika Ploeger, 2018. "Farmers’ Perception of Water Quality and Risks in the Mashavera River Basin, Georgia: Analyzing the Vulnerability of the Social-Ecological System through Community Perceptions," Sustainability, MDPI, vol. 10(9), pages 1-26, August.
    2. Sven Ove Hansson & Terje Aven, 2014. "Is Risk Analysis Scientific?," Risk Analysis, John Wiley & Sons, vol. 34(7), pages 1173-1183, July.
    3. Yang, Ya Ling, 2020. "Comparison of public perception and risk management decisions of aircraft noise near Taoyuan and Kaohsiung International Airports," Journal of Air Transport Management, Elsevier, vol. 85(C).
    4. Natalia Vladimirovna Gryzunova & Victoria Ivanovna Pyatanova & Viktoriya Valeryevna Manuylenko & Konstantin Vasilievich Ordov, 2019. "Models of credit limit-setting for companies as means of encouraging competitiveness," Entrepreneurship and Sustainability Issues, VsI Entrepreneurship and Sustainability Center, vol. 7(1), pages 615-625, September.
    5. Nadja Thoma & Phil C. Langer, 2022. "Educational Transitions in War and Refugee Contexts: Youth Biographies in Afghanistan and Austria," Social Inclusion, Cogitatio Press, vol. 10(2), pages 302-312.
    6. Rudolf R. Sinkovics & Eva A. Alfoldi, 2012. "Progressive Focusing and Trustworthiness in Qualitative Research," Management International Review, Springer, vol. 52(6), pages 817-845, December.
    7. Grzegorz Drozdowski & Joanna Rogozińska-Mitrut & Jacek Stasiak, 2021. "The Empirical Analysis of the Core Competencies of the Company’s Resource Management Risk. Preliminary Study," Risks, MDPI, vol. 9(6), pages 1-12, June.
    8. Aven, Terje, 2013. "Practical implications of the new risk perspectives," Reliability Engineering and System Safety, Elsevier, vol. 115(C), pages 136-145.
    9. Aven, Terje, 2018. "How the integration of System 1-System 2 thinking and recent risk perspectives can improve risk assessment and management," Reliability Engineering and System Safety, Elsevier, vol. 180(C), pages 237-244.
    10. Aven, Terje & Krohn, Bodil S., 2014. "A new perspective on how to understand, assess and manage risk and the unforeseen," Reliability Engineering and System Safety, Elsevier, vol. 121(C), pages 1-10.
    11. Aresu, Simone & Monfardini, Patrizio, 2023. "Oppressed by consumerism: The emancipatory role of household accounting," CRITICAL PERSPECTIVES ON ACCOUNTING, Elsevier, vol. 96(C).
    12. Daniel J. Rozell, 2018. "The Ethical Foundations of Risk Analysis," Risk Analysis, John Wiley & Sons, vol. 38(8), pages 1529-1533, August.
    13. Sander C. S. Clahsen & Irene van Kamp & Betty C. Hakkert & Theo G. Vermeire & Aldert H. Piersma & Erik Lebret, 2019. "Why Do Countries Regulate Environmental Health Risks Differently? A Theoretical Perspective," Risk Analysis, John Wiley & Sons, vol. 39(2), pages 439-461, February.
    14. Juliana Aurora de Oliveira Lopes & Léo Heller, 2020. "Explanatory Matrices on the Causes of a Tailing Dam Collapse in Brazil: The (Dis)Articulation of Epistemes," Risk Analysis, John Wiley & Sons, vol. 40(12), pages 2524-2538, December.
    15. Ayman Nagi & Meike Schroeder & Wolfgang Kersten, 2021. "Risk Management in Seaports: A Community Analysis at the Port of Hamburg," Sustainability, MDPI, vol. 13(14), pages 1-20, July.
    16. Gale, Nicola K. & Kenyon, Sara & MacArthur, Christine & Jolly, Kate & Hope, Lucy, 2018. "Synthetic social support: Theorizing lay health worker interventions," Social Science & Medicine, Elsevier, vol. 196(C), pages 96-105.
    17. Reeko Watanabe & Tsunemi Watanabe, 2020. "Does Haze Drive Pro-Environmental and Energy Conservation Behaviors? Evidence from the Beijing-Tianjin-Hebei Area in China," Sustainability, MDPI, vol. 12(23), pages 1-17, November.
    18. Rio Yonson & Ilan Noy, 2020. "Disaster Risk Management Policies and the Measurement of Resilience for Philippine Regions," Risk Analysis, John Wiley & Sons, vol. 40(2), pages 254-275, February.
    19. Abrahamsen, Eirik Bjorheim & Selvik, Jon Tømmerås & Milazzo, Maria Francesca & Langdalen, Henrik & Dahl, Roy Endre & Bansal, Surbhi & Abrahamsen, Håkon Bjorheim, 2021. "On the use of the ‘Return Of Safety Investments’ (ROSI) measure for decision-making in the chemical processing industry," Reliability Engineering and System Safety, Elsevier, vol. 210(C).
    20. Rosario Vázquez-Carrasco & Ma. López-Pérez & Edgar Centeno, 2012. "A qualitative approach to the challenges for women in management: are they really starting in the 21st century?," Quality & Quantity: International Journal of Methodology, Springer, vol. 46(5), pages 1337-1357, August.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:eee:ijocip:v:12:y:2016:i:c:p:12-26. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Catherine Liu (email available below). General contact details of provider: https://www.journals.elsevier.com/international-journal-of-critical-infrastructure-protection .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.