|
Persistent Identifier
|
doi:10.18710/XAKJY6 |
|
Publication Date
|
2025-02-13 |
|
Title
| Replication Data for: A Model-Based Framework for Developing Security-Safety Incident Response Plans |
|
Author
| Gnanasekaran, VahinyNTNU – Norwegian University of Science and TechnologyORCID0009-0003-2865-2115
Fatima, UroojNTNU – Norwegian University of Science and TechnologyORCID0009-0009-7635-1601
Heegaard, Poul EinarNTNU – Norwegian University of Science and TechnologyORCID0000-0003-0083-5860 |
|
Point of Contact
|
Use email button above to contact.
Gnanasekaran, Vahiny (NTNU – Norwegian University of Science and Technology) |
|
Description
| This data set contains 33 modeling diagrams used to model incident response procedures in security-safety incident response from two Norwegian oil and gas companies. The file set includes all diagrams in .png format depicting different perspectives on role responsibilities and interactions during the incident response used for analysis.
The diagrams were based on empirical findings using two case studies from the Norwegian oil and gas industry, by conducting semi-structured interviews, document analysis, and multiple meetings. However, the empirical findings are not reported here since they are not permitted to be shared. (2024-12-02)
Abstract from publication:
Cyberattacks are increasingly affecting the safe operation of critical infrastructure (e.g., energy, manufacturing) and potentially endangering production, people, equipment, and the environment. A cyber-incident with physical consequences requires personnel responsible for aggregating log information, analyzing root cause (i.e., cybersecurity), and ensuring the production and safe operation of safety-critical systems (i.e., safety) to collaborate. For this, they must understand their own and each other's roles in the incident response process, as well as when and how to interact with different roles. To address this problem, this paper proposes a framework that utilizes a model-based approach to illustrate the critical roles and their interactions within a security-safety incident response plan. To demonstrate its applicability, the framework was applied in a qualitative study within the Norwegian oil and gas industry, involving two companies. This research sheds light on the relevance of applying a model-based approach to developing security and safety incident response plans for organizations. It investigates the relevance of using two modeling languages: a general-purpose software systems modeling language, the Unified Modeling Language (UML), and an enterprise process workflow modeling language, the Business Process Modeling Notation (BPMN), for visualizing the security-safety incident response plan. The findings indicate that the modeling languages are suitable and relevant for understanding and discussing the collaboration and coordination of different personnel's roles during security-safety incident response. The distinct diagrams highlight various aspects, including roles, transmitted information, tasks, and the sequence of tasks. Future work should consider how the diagrams can be applied during the training and learning of the incident response plans. (2025-07-15) |
|
Subject
| Computer and Information Science |
|
Keyword
| Modelling diagram
Incident response
Cyber security
Safety |
|
Related Publication
| Is Supplement To: Gnanasekaran, V., Fatima, U., Glas, M. et al. A Model-Based Framework for Developing Security-Safety Incident Response Plans. Int. J. Inf. Secur. 24, 229 (2025). doi 10.1007/s10207-025-01147-4 |
|
Language
| English |
|
Producer
| NTNU – Norwegian University of Science and Technology (NTNU) https://www.ntnu.edu/ |
|
Contributor
| Data Curator: Gnanasekaran, Vahiny
Data Collector: Fatima, Urooj
Supervisor: Heegaard, Poul Einar |
|
Funding Information
| The Research Council of Norway: 326717 |
|
Distributor
| NTNU – Norwegian University of Science and Technology (NTNU) https://dataverse.no/dataverse/ntnu |
|
Depositor
| Gnanasekaran, Vahiny |
|
Deposit Date
| 2024-12-02 |
|
Time Period
| Start Date: 2024-09-01; End Date: 2025-01-31 |
|
Data Type
| machine-readable text; modeling diagrams |
|
Software
| PlantUML, Version: V1.2025.0
Draw.io, Version: 24.7.17
BPMN.io, Version: v17.11.1 |
|
Related Material
| Vahiny Gnanasekaran, Maria Bartnes, Tor Olav Grotan, and Poul Einar Heegaard. 2024. Cyber-incident Response in Industrial Control Systems: Practices and Challenges in the Petroleum Industry. In Proceedings of the 2024 ACM/IEEE 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS) and 2024 IEEE/ACM Second International Workshop on Software Vulnerability (EnCyCriS/SVM '24). Association for Computing Machinery, New York, NY, USA, 53–60. https://doi.org/10.1145/3643662.3643958 |
