European risk assessment methodology for critical infrastructures

Abstract

Most risk assessment methodologies aim at the risk at the level of an individual organization or company. The European Union commissioned a study to define the elements for a uniform and scalable risk assessment methodology which takes into account critical infrastructure dependencies across organizations and sectors. The method can be applied at the sector level, cross-sector level and the multinational (EU) level. The advantage is the re-use of risk assessments at lower levels of aggregation scaling up to the European level. The approach to risk assessment and external dependencies can also be used by companies with multiple sites.