|
Persistent Identifier
|
doi:10.18710/XAKJY6 |
|
Publication Date
|
2025-02-13 |
|
Title
| Replication Data for: Using Modeling Languages to Visualize Role Interactions in Security-Safety Incident Response |
|
Author
| Gnanasekaran, Vahiny (NTNU – Norwegian University of Science and Technology) - ORCID: 0009-0003-2865-2115
Fatima, Urooj (NTNU – Norwegian University of Science and Technology) - ORCID: 0009-0009-7635-1601
Heegaard, Poul Einar (NTNU – Norwegian University of Science and Technology) - ORCID: 0000-0003-0083-5860 |
|
Point of Contact
|
Use email button above to contact.
Gnanasekaran, Vahiny (NTNU – Norwegian University of Science and Technology) |
|
Description
| This data set contains 33 modeling diagrams used to model incident response procedures in security-safety incident response from two Norwegian oil and gas companies. The file set includes all diagrams in .png format depicting different perspectives on role responsibilities and interactions during the incident response used for analysis.
The diagrams were based on empirical findings using two case studies, conducting semi-structured interviews, document analysis, and multiple meetings. However, the empirical findings are not reported here since they are not permitted to be shared. (2024-12-02)
Abstract from publication:
Cyberattacks are increasingly affecting the safe operation of critical infrastructure (e.g., energy, manufacturing) and have the potential to endanger production, people, and equipment. Incident response personnel across the cybersecurity and safety domain must collaborate. For this, they must understand their own and each others' roles they need to play in the incident response, as well as when and how to interact with other roles. In order to address this problem, this paper proposes the utilization of modeling languages to illustrate these critical roles and their interactions from two security-safety incident response playbooks developed by a qualitative study in the Norwegian oil and gas industry. This research sheds light on the relevance of using modeling language to model incident response playbooks for organizations. It investigates the relevance of using two modeling languages: a general-purpose software systems modeling language, the Unified Modeling Language (UML), and an enterprise process workflow modeling language, the Business Process Modeling Notation (BPMN), for a joint incident response playbook. The findings indicate that the modeling languages are suitable and relevant for understanding and discussing the collaboration and coordination of different personnel's roles during security-safety incident response. The distinct diagrams highlight various aspects, such as the roles, transmitted information, tasks, and the task order/sequence present in the joint incident response. Future work should consider how the diagrams can be applied during training and learning of joint incident response playbooks. (2025-02-12) |
|
Subject
| Computer and Information Science |
|
Keyword
| Modelling diagram
Incident response
Cyber security
Safety |
|
Related Publication
| Submitted for review |
|
Language
| English |
|
Producer
| NTNU – Norwegian University of Science and Technology (NTNU) https://www.ntnu.edu/ |
|
Contributor
| Data Curator : Gnanasekaran, Vahiny
Data Collector : Fatima, Urooj
Supervisor : Heegaard, Poul Einar |
|
Funding Information
| The Research Council of Norway: 326717 |
|
Distributor
| NTNU – Norwegian University of Science and Technology (NTNU) https://dataverse.no/dataverse/ntnu |
|
Depositor
| Gnanasekaran, Vahiny |
|
Deposit Date
| 2024-12-02 |
|
Time Period
| Start Date: 2024-09-01 ; End Date: 2025-01-31 |
|
Data Type
| machine-readable text; modeling diagrams |
|
Software
| PlantUML, Version: V1.2025.0
Draw.io, Version: 24.7.17
BPMN.io, Version: v17.11.1 |
|
Related Material
| Vahiny Gnanasekaran, Maria Bartnes, Tor Olav Grotan, and Poul Einar Heegaard. 2024. Cyber-incident Response in Industrial Control Systems: Practices and Challenges in the Petroleum Industry. In Proceedings of the 2024 ACM/IEEE 4th International Workshop on Engineering and Cybersecurity of Critical Systems (EnCyCriS) and 2024 IEEE/ACM Second International Workshop on Software Vulnerability (EnCyCriS/SVM '24). Association for Computing Machinery, New York, NY, USA, 53–60. https://doi.org/10.1145/3643662.3643958 |
