This article explores the question of how to measure information security. Organisational information security is difficult to evaluate in this complex area because it includes numerous factors. The human factor has been acknowledged as one of the most challenging factors to consider in the field of information security. This study models the application of data envelopment analysis to business processes in order to facilitate the evaluation of information security that includes human factors. In addition to the model, this study demonstrates that data envelopment analysis provides an efficiency measure to assess the information security level of a business process. The novel approach that is proposed in this paper is exemplified with the aid of three fictive processes. The Business Process Model and Notation has been used to map the processes because it facilitates the visualisation of human interactions in processes and the form of the processed information. The combination of data envelopment analysis with process modelling and analyses of process deficiencies and threats to information security enables the evaluation of information security to include human factors in the analyses. Moreover, it provides a measure to benchmark information security in organisational processes.

This paper develops a model to support the optimal choice of an airport as a base for the flying vehicles that are operated to extinguish wildfires and forest fires. Based on experiences from the two largest wildfires in Swedish history, this study models the optimisation as a balanced transportation problem. In both cases, the model selected the airport that is closest to the fire area. If the capacity of the chosen airport was insufficient to host all of the flying vehicles, then the model added a second airport which is also nearby the wildfire area. The cases demonstrate that the total cost of the operation is lower when the extinguishing work is concentrated in an area that has a short distance between the airport and the fire, the fuel depots and the pilots’ accommodation. Improved access to relevant data in the context of crisis management by air could allow for the inclusion of additional parameters and correct data in the optimisation model, which could in turn provide more comprehensive decision-making support.

Information security incidents are increasing both in number and in scope. In consequence, the General Data Protection Regulation and the Directive on security of network and information systems fo ...

This paper develops a model for analysing systemic implications of strategic objectives in the context of national emergency response planning for the case of an electrical power shortage. Drawing ...

This paper outlines a soft systems method approach to model a national preparedness planning procedure for the case of an electrical power shortage. Through the model, we provide a new perspective on enhancing and understanding the joint decision-making environment for the actors involved in the planning procedure, as well as its underlying power structure. By a process of abstraction from the current implementation, a core root definition is presented which provides a generic systems view that can be a useful concept for the study of similar contexts. An action model dedicated to determining meaningful and valid activities is derived, providing insights for the improvement of collaborative emergency response planning in general. The paper, thus, aims to contribute to the communication and cooperation between actors and stakeholders in the development of appropriate decision processes and decision support in the context of emergency preparedness.