AssessITS: Integrating Procedural Guidelines and Practical Evaluation Metrics for Organizational IT and Cybersecurity Risk Assessment

In today’s digitally driven landscape, robust Information Technology (IT) risk assessment practices are essential for safeguarding systems, digital communication, and data. This paper introduces “AssessITS,” an actionable method designed to provide organizations with comprehensive guidelines for conducting IT and cybersecurity risk assessments. Drawing extensively from NIST 800-30 Rev 1, COBIT 5, and ISO 31000, “AssessITS” bridges the gap between high-level theoretical standards and practical implementation challenges. The paper outlines a step-by-step methodology that organizations can simply adopt to systematically identify, analyze, and mitigate IT risks. By simplifying complex principles into actionable procedures, this framework equips practitioners with the tools needed to perform risk assessments independently, without too much reliance on external vendors. The guidelines are developed to be straightforward, integrating practical evaluation metrics that allow for the precise quantification of asset values, threat levels, vulnerabilities, and impacts on confidentiality, integrity, and availability. This approach ensures that the risk assessment process is not only comprehensive but also accessible, enabling decision-makers to implement effective risk mitigation strategies customized to their unique operational contexts. “AssessITS” aims to enable organizations to enhance their IT security strength through practical, actionable guidance based on internationally recognized standards.

Distribution,risk evaluation,and source analysis of the heavy metals in the sediment deposition of the lower Shichuanhe River,Shaanxi,China

In this study, 30 sediment samples were collected from the lower reaches of the Shichuanhe River in Xi’an, Shaanxi Province, China, to test the distribution of heavy metal elements in this area and for an analysis of the pollution levels of this area, hope to provide guidance on agricultural production activities in this region. The results show that the heavy metal elements in this area are mainly concentrated at the Qinghe River and Shichuanhe River confluences. Furthermore, the element contents are higher than that of the background levels of the continental crust(UCC) and close to the background levels of the soil from Shaanxi Province;the two most enriched elements are Cd and As, with contents of 0.79 and 22.7 mg·kg-1, respectively, and their contents are 3.8 and 1.72 times higher than that of the background values. Herein, the heavy metal pollution assessment methods applied indicated that Cd and As are the two most abundant pollutant elements in the area’s soils. As has a peak geo-accumulation index value of 3, and the pollution level is high, while Cd exhibits high potential ecological risks due to its high toxicity(potential risk index of 143) and an active fraction of more than 64%.In addition, a principal component analysis and hierarchical cluster analysis study showed that there are two sources of the heavy metals in this area. The Zn, As, Ni, Cu, Pb,and Cr are mainly from natural sources, and the Cd likely comes from a discharge of untreated agricultural wastewater in the region. The Cd which poses a high potential risk and mainly results from human activities, needs to be further monitored.

Risk Assessment of Deep-Water Horizontal X-Tree Installation

Due to the high potential risk and many influencing factors of subsea horizontal X-tree installation,to guarantee the successful completion of sea trials of domestic subsea horizontal X-trees,this paper established a modular risk evaluation model based on a fuzzy fault tree.First,through the analysis of the main process oftree down and combining the Offshore&Onshore Reliability Data(OREDA)failure statistics and the operation procedure and the data provided by the job,the fault tree model of risk analysis of the tree down installation was established.Then,by introducing the natural language of expert comprehensive evaluation and combining fuzzy principles,quantitative analysis was carried out,and the fuzzy number was used to calculate the failure probability of a basic event and the occurrence probability of a top event.Finally,through a sensitivity analysis of basic events,the basic events of top events significantly affected were determined,and risk control and prevention measures for the corresponding high-risk factors were proposed for subsea horizontal X-tree down installation.

Technology Research on Lightning Strike Risk Evaluation of a Cable Car

According to structure function and lightning damage of a cable car, a feasible method of lightning strike risk evaluation for a cable car was put forward based on the evaluation model and evaluation method in the standard IEC62305-2. According to the difference between common buildings and cable cars, problems of height non-uniformity of equivalent section caused by inclination of the cable car and diversity of lightning activity regularity caused by the large area were resolved, and expected annual average frequency of lightning strike was calculated using three dimensional graphic approach and regional lightning characteristic analysis. Based on different types of damage process and loss consequences, according to interception effect against lightning invasion of the lightning protection measures and the method of probability selection proposed in the standard, the probability of casu- alty caused by direct lightning strike in a cable car and a waiting area as well as probabilities of casualty caused by failure of electronic information systems were cal- culated.

Risk Evaluation of Monochamus alternatus Hope in Jiangxi Province

[Objective]The study aimed to further strengthen the integrated management of Monochamus alternatus Hope and effectively control its spread and injury in pine forests in Jiangxi Province.[Method] By using the pest risk analysis method,the qualitative and quantitative analysis on risk of M.alternatus in Jiangxi Province was carried out.[Result] The qualitative and quantitative analysis result showed that its risk value R was 1.89,thus confirming that M.alternatus was close to high dangerous forest pest in Jiangxi Province.[Conclusion] The study provided the reference for making the policy decision for control of M.alternatus.

Risk evaluation of rock burst through theory of static and dynamic stresses superposition

Rock burst is one of the most catastrophic dynamic hazards in coal mining. A static and dynamic stresses superposition-based(SDSS-based) risk evaluation method of rock burst was proposed to pre-evaluate rock burst risk. Theoretical basis of this method is the stress criterion incurring rock burst and rock burst risk is evaluated according to the closeness degree of the total stress(due to the superposition of static stress in the coal and dynamic stress induced by tremors) with the critical stress. In addition, risk evaluation criterion of rock burst was established by defining the "Satisfaction Degree" of static stress. Furthermore,the method was used to pre-evaluate rock burst risk degree and prejudge endangered area of an insular longwall face in Nanshan Coal Mine in China. Results show that rock burst risk is moderate at advance extent of 97 m, strong at advance extent of 97-131 m,and extremely strong(i.e. inevitable to occur) when advance extent exceeds 131 m(mining is prohibited in this case). The section of two gateways whose floor abuts 15-3 coal seam is a susceptible area prone to rock burst. Evaluation results were further compared with rock bursts and tremors detected by microseismic monitoring. Comparison results indicate that evaluation results are consistent with microseismic monitoring, which proves the method's feasibility.

Improved AHP–TOPSIS model for the comprehensive risk evaluation of oil and gas pipelines

A comprehensive and objective risk evaluation model of oil and gas pipelines based on an improved analytic hierarchy process(AHP)and technique for order preference by similarity to an ideal solution(TOPSIS)is established to identify potential hazards in time.First,a barrier model and fault tree analysis are used to establish an index system for oil and gas pipeline risk evaluation on the basis of five important factors:corrosion,external interference,material/construction,natural disasters,and function and operation.Next,the index weight for oil and gas pipeline risk evaluation is computed by applying the improved AHP based on the five-scale method.Then,the TOPSIS of a multi-attribute decision-making theory is studied.The method for determining positive/negative ideal solutions and the normalized equation for benefit/cost indexes is improved to render TOPSIS applicable for the comprehensive risk evaluation of pipelines.The closeness coefficient of oil and gas pipelines is calculated by applying the improved TOPSIS.Finally,the weight and the closeness coefficient are combined to determine the risk level of pipelines.Empirical research using a long-distance pipeline as an example is conducted,and adjustment factors are used to verify the model.Results show that the risk evaluation model of oil and gas pipelines based on the improved AHP–TOPSIS is valuable and feasible.The model comprehensively considers the risk factors of oil and gas pipelines and provides comprehensive,rational,and scientific evaluation results.It represents a new decision-making method for systems engineering in pipeline enterprises and provides a comprehensive understanding of the safety status of oil and gas pipelines.The new system engineering decision-making method is important for preventing oil and gas pipeline accidents.

Catastrophe theory-based risk evaluation model for water and mud inrush and its application in karst tunnels

This paper presents a risk evaluation model of water and mud inrush for tunnel excavation in karst areas.The factors affecting the probabilities of water and mud inrush in karst tunnels are investigated to define the dangerousness of this geological disaster.The losses that are caused by water and mud inrush are taken into consideration to account for its harmfulness.Then a risk evaluation model based on the dangerousness-harmfulness evaluation indicator system is constructed,which is more convincing in comparison with the traditional methods.The catastrophe theory is used to evaluate the risk level of water and mud inrush and it has great advantage in handling problems involving discontinuous catastrophe processes.To validate the proposed approach,the Qiyueshan tunnel of Yichang-Wanzhou Railway is taken as an example in which four target segments are evaluated using the risk evaluation model.Finally,the evaluation results are compared with the excavation data,which shows that the risk levels predicted by the proposed approach are in good agreements with that observed in engineering.In conclusion,the catastrophe theory-based risk evaluation model is an efficient and effective approach for water and mud inrush in karst tunnels.

Seismic risk evaluation for a planning mountain tunnel using improved analytical hierarchy process based on extension theory

Seismic risk evaluation(SRE) in early stages(e.g., project planning and preliminary design)for a mountain tunnel located in seismic areas has the same importance as that in final stages(e.g.,performance-based design, structural analysis, and optimization). SRE for planning mountain tunnels bridges the gap between the planning on the macro level and the design/analysis on the micro level regarding the risk management of infrastructural systems. A transition from subjective or qualitative description to objective or quantitative quantification of seismic risk is aimed to improve the seismic behavior of the mountain tunnel and thus reduce the associated seismic risk. A new method of systematic SRE for the planning mountain tunnel was presented herein. The method employs extension theory(ET)and an ET-based improved analytical hierarchy process. Additionally, a new risk-classification criterion is proposed to classify and quantify the seismic risk for a planning mountain tunnel. This SRE method is applied to a mountain tunnel in southwest China, using the extension model based on matter element theory and dependent function operation.The reasonability and flexibility of the SRE method for application to the mountain tunnel are illustrated.According to different seismic risk levels and classification criteria, methods and measures for improving the seismic design are proposed, which can reduce the seismic risk and provide a frame of reference for elaborate seismic design.

Antithrombotic treatment tailoring and risk score evaluation in elderly patients diagnosed with an acute coronary syndrome

Age is an important prognostic factor in the outcome of acute coronary syndromes （ACS）. A substantial percentage of patients who ex- perience ACS is more than 75 years old, and they represent the fastest-growing segment of the population treated in this setting. These pa- tients present different patterns of responses to pharmacotherapy, namely, a higher ischemic and bleeding risk than do patients under 75 years of age. Our aim was to identify whether the currently available ACS ischemic and bleeding risk scores, which has been validated for the general population, may also apply to the elderly population. The second aim was to determine whether the elderly benefit more from a spe- cific pharmacological regimen, keeping in mind the numerous molecules of antiplatelet and antithrombotic drugs, all validated in the general population. We concluded that the GRACE （Global Registry of Acute Coronary Events） risk score has been extensively validated in the elderly. However, the CRUSADE （Can Rapid risk stratification of Unstable angina patients Suppress ADverse outcomes with Early imple- mentation of the ACC/AHA Guidelines） bleeding score has a moderate correlation with outcomes in the elderly. Until now, there have not been head-to-head scores that quantify the ischemic versus hemorrhagic risk or scores that use the same end point and timeline （e.g., ischemic death rate versus bleeding death rate at one month）. We also recommend that the frailty score be considered or integrated into the current existing scores to better quantify the overall patient risk. With regard to medical treatment, based on the subgroup analysis, we identified the drugs that have the least adverse effects in the elderly while maintaining optimal efficacy.

Reliability Risk Evaluation Method for Complex Mechanical System Based on Optimal Bayesian Network

In order to reduce the calculation of the failure probability in the complex mechanical system reliability risk evaluation,and to implement importance analysis of system components effectively,the system fault tree was converted into five different Bayesian network models. The Bayesian network with the minimum conditional probability table specification and the highest computation efficiency was selected as the optimal network. The two heuristics were used to optimize the Bayesian network. The fault diagnosis and causal reasoning of the system were implemented by using the selected Bayesian network. The calculation methods of Fussel-Vesely( FV),risk reduction worth( RRW),Birnbaum measure( BM) and risk achievement worth( RAW) importances were presented. A certain engine was taken as an application example to illustrate the proposed method. The results show that not only the correlation of the relevant variables in the system can be accurately expressed and the calculation complexity can be reduced,but also the relatively weak link in the system can be located accurately.

Drought risk assessment in China:Evaluation framework and influencing factors

Global warming and rapid economic development have led to increased levels of disaster risk in China.Previous attempts at assessing drought risk were highly subjective in terms of assessment methods and selection of the assessment indicators and which resulted in appreciable uncertainty in the results of these risk assessments.Based on the assumption that areas with historically high drought losses are more likely to suffer future high drought losses,we develop a new drought risk assessment model that includes historical drought loss data.With this model,we map the regional differentiation of Chinese drought risk.Regions with high(extreme high)drought risk account for 4.3%of China’s area.Five significant high-risk areas have been identified:Northeast China,North China,the east part of Northwest China,the east part of Southwest China and a small part in the west of Northwest China.Areas with high and extreme high drought risk are dominant in the Heilongjiang Province,accounting for 32%of the total area,followed by the Ningxia Hui Autonomous Region,with 26%of total area.The contribution of each influencing factor has been quantified,which indicates that high-exposure and high-vulnerability account for the high-risk of drought.We recommend that measures like strengthening the protection of cultivated land and reducing dependence on the primary industry should be taken to mitigate to drought-induced losses.

AHP-FCE Based Physical Exercise Risk Evaluation Model

Exercise is a highly proven and beneficial health promotion modality, But it is very difficult to determine whether the person during exercise is safe. A unique and comprehensive approach is proposed to perform physical exercise risk evaluation （PERE）, in which personalized factors are deterrrdned basing on grey correlation analysis, analytic hierarchy process （AHP） method is used to structure the large numbers of risk factors, and fuzzy comprehensive evaluation （FCE） is applied to fuzzify the factors and compute the exercise risk level. Finally, an actual calculation example is used to verify the feasibility of the method.

Acoustic Prediction and Risk Evaluation of Shallow Gas in Deep-Water Areas

Shallow gas is a potential risk in deep-water drilling that must not be ignored,as it may cause major safety problems,such as well kicks and blowouts.Thus,the pre-drilling prediction of shallow gas is important.For this reason,this paper conducted deep-water shallow gas acoustic simulation experiments based on the characteristics of deep-water shallow soil properties and the theory of sound wave speed propagation.The results indicate that the propagation speed of sound waves in shallow gas increases with an in-crease in pressure and decreases with increasing porosity.Pressure and sound wave speed are basically functions of the power expo-nent.Combined with the theory of sound wave propagation in a saturated medium,this paper establishes a multivariate functional relationship between sound wave speed and formation pressure and porosity.The numerical simulation method is adopted to simulate shal-low gas eruptions under different pressure conditions.Shallow gas pressure coefficients that fall within the ranges of 1.0-1.1,1.1-1.2,and exceeding 1.2 are defined as low-,medium-,and high-risk,respectively,based on actual operations.This risk assessment me-thod has been successfully applied to more than 20 deep-water wells in the South China Sea,with a prediction accuracy of over 90%.

Evaluation and Forecasting of Wind Energy Investment Risk along the Belt and Road Based on a Novel Hybrid Intelligent Model

The timely and effective investment risk assessment and forecasting are of great significance to ensure the investment safety and sustainable development of wind energy along the Belt and Road.In order to obtain the scientific and real-time forecasting result,this paper constructs a novel hybrid intelligent model based on improved cloud model combined with GRA-TOPSIS and MBA-WLSSVM.Firstly,the factors influencing investment risk of wind energy along the Belt and Road are identified fromthree dimensions:endogenous risk,exogenous risk and process risk.Through the fuzzy threshold method,the final input index system is selected.Secondly,the risk evaluation method based on improved cloud model andGRA-TOPSIS is proposed.Thirdly,a modern intelligent model based on MBA-WLSSVMis designed.In modified bat algorithm(MBA),tent chaotic map is utilized to improve the basic bat algorithm,while weighted least squares support vector machine(WLSSVM)adopts wavelet kernel function to replace the traditional radial basis function to complete the model improvement.Finally,an example is given to verify the scientificity and accuracy of themodel,which is helpful for investors tomake fast and effective investment risk forecasting of wind energy along the Belt and Road.The example analysis proves that the proposedmodel can provide reference and basis for investment corpus to formulate the investment strategy in wind energy along the Belt and Road.

Credit risk evaluation using adaptive Lq penalty SVM with Gauss kernel

In order to improve the performance of support vector machine (SVM) applications in the field of credit risk evaluation, an adaptive Lq SVM model with Gauss kernel (ALqG-SVM) is proposed to evaluate credit risks. The non-adaptive penalty of the object function is extended to (0, 2] to increase classification accuracy. To further improve the generalization performance of the proposed model, the Gauss kernel is introduced, thus the non-linear classification problem can be linearly separated in higher dimensional feature space. Two UCI credit datasets and a real life credit dataset from a US major commercial bank are used to check the efficiency of this model. Compared with other popular methods, satisfactory results are obtained through a novel method in the area of credit risk evaluation. So the new model is an excellent choice.

Researches on Risk Evaluation of Green Agro-product Closed Supply Chain

Closed supply chain is a superior form of management model of chain supply and an effective means of improving the modernization of agro-product circulation. Based on the research results of the current literatures on supply chain risk and agro-product supply chain, related subjects of the agro-product closed supply chain involving production, management and consumption are studied and analyzed and the primary risking factors in the supply chain system are classified as environmental risk, system risk, information risk, management risk and quality risk. Risk of agro-product closed supply chain is evaluated by using the method of fuzzy comprehensive evaluation and the values are acquired. The result shows that risk of agro-product closed supply chain is moderate with relatively high risk, which basically accords with the present actual situations. It can be seen from the index weights of various levels that the key first-level indices influencing the risks are system risk, information risk, quality and safety risk and the key second-level are the coordinating and controlling ability of core enterprises, the implementation of information traceability and the construction of quality safety system. Therefore, risk of agro-product closed supply chain should be reduced by taking prevention and controlling measures mainly from these aspects.

Authorization Management Framework Based on Joint Trust-Risk Evaluation

Authorization management is important precondition and foundation for coordinating and resource sharing in open networks. Recently, authorization based on trust is widely used whereby access rights to shared resource are granted on the basis of their trust relation in distributed environment. Nevertheless, dynamic change of the status of credential and chain of trust induces to uncertainty of trust relation. Considering uncertainty of authorization and analyzing deficiency of authorization model only based on trust, we proposes joint trust-risk evaluation and build the model based on fuzzy set theory, and make use of the membership grade of fuzzy set to express joint trust-risk relation. Finally, derivation principle and constraint principle of joint trust-risk relationships are presented. The authorization management model is defined based on joint trust-risk evaluation, proof of compliance and separation of duty are analyzed. The proposed model depicts not only trust relationship between principals, but also security problem of authorization.

Real-time lane departure warning system based on principal component analysis of grayscale distribution and risk evaluation model

A technology for unintended lane departure warning was proposed. As crucial information, lane boundaries were detected based on principal component analysis of grayscale distribution in search bars of given number and then each search bar was tracked using Kalman filter between frames. The lane detection performance was evaluated and demonstrated in ways of receiver operating characteristic, dice similarity coefficient and real-time performance. For lane departure detection, a lane departure risk evaluation model based on lasting time and frequency was effectively executed on the ARM-based platform. Experimental results indicate that the algorithm generates satisfactory lane detection results under different traffic and lighting conditions, and the proposed warning mechanism sends effective warning signals, avoiding most false warning.

Fire risk evaluation research on fully mechanized coalface based on the uncertainty measure theory

A relatively perfect coalmine fire risk-evaluating and order-arranging model that includes sixteen influential factors was established according to the statistical information of the fully mechanized coalface ground on the uncertainty measure theory. Then the single-index measure function of sixteen influential factors and the calculation method of computing the index weight ground on entropy theory were respectively established. The value assignment of sixteen influential factors was carried out by the qualitative analysis and observational data, respectively, in succession. The sequence of fire danger class of four experimental coalfaces could be obtained by the computational aids of Matlab according to the confidence level criterion. Some conclusions that the fire danger class of the No.l, No.2 and No.3 coalface belongs to high criticality can be obtained. But the fire danger class of the No.4 coalface belongs to higher criticality. The fire danger class of the No.4 coalface is more than that of the No.2 coalface. The fire danger class of the No.2 coalface is more than that of the No.1 coalface. Finally, the fire danger class of the No.1 coalface is more than that of the No.3 coalface.