{"id":"https://openalex.org/W7225588396","doi":"https://doi.org/10.5281/zenodo.24049686","title":"Beyond Operational Security: Aggregation Failure, Interface Ownership and the Design of Layered Risk Assurance in Complex Organisations","display_name":"Beyond Operational Security: Aggregation Failure, Interface Ownership and the Design of Layered Risk Assurance in Complex Organisations","publication_year":2026,"publication_date":"2026-11-08","ids":{"openalex":"https://openalex.org/W7225588396","doi":"https://doi.org/10.5281/zenodo.24049686"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.24049686","doi":"https://doi.org/10.5281/zenodo.24049686","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24049686","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.24049686","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5116452185","display_name":"Prajwal Bhattarai","orcid":"https://orcid.org/0009-0004-3313-7772","observed_orcids":["https://orcid.org/0009-0004-3313-7772"]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Prajwal Bhattarai","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5116452185"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10747","display_name":"Disaster Management and Resilience","score":0.7310000061988831,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10747","display_name":"Disaster Management and Resilience","score":0.7310000061988831,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11357","display_name":"Risk and Safety Analysis","score":0.10849999636411667,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14410","display_name":"Safety and Risk Management","score":0.06669999659061432,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/enterprise-risk-management","display_name":"enterprise risk management","score":0.7919999957084656},{"id":"https://openalex.org/keywords/resilience-engineering","display_name":"resilience engineering","score":0.9990000128746033},{"id":"https://openalex.org/keywords/public-inquiry","display_name":"public inquiry","score":0.7329999804496765},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"risk assessment","score":0.5519999861717224},{"id":"https://openalex.org/keywords/hazard-prioritization","display_name":"hazard prioritization","score":0.6890000104904175},{"id":"https://openalex.org/keywords/organizational-design","display_name":"organizational design","score":0.4729999899864197}],"concepts":[{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.6158999800682068},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.5332000255584717},{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.4848000109195709},{"id":"https://openalex.org/C2780795517","wikidata":"https://www.wikidata.org/wiki/Q6030997","display_name":"Information assurance","level":3,"score":0.48399999737739563},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.4812999963760376},{"id":"https://openalex.org/C207209096","wikidata":"https://www.wikidata.org/wiki/Q848268","display_name":"Enterprise risk management","level":3,"score":0.4763000011444092},{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.4706000089645386},{"id":"https://openalex.org/C49261128","wikidata":"https://www.wikidata.org/wiki/Q1132455","display_name":"Hazard","level":2,"score":0.4426000118255615},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4397999942302704},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4383000135421753},{"id":"https://openalex.org/C2776949292","wikidata":"https://www.wikidata.org/wiki/Q471855","display_name":"Jurisdiction","level":2,"score":0.41760000586509705},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4034000039100647},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.40209999680519104},{"id":"https://openalex.org/C144559511","wikidata":"https://www.wikidata.org/wiki/Q2986279","display_name":"Principal (computer security)","level":2,"score":0.3894999921321869},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.3634999990463257},{"id":"https://openalex.org/C527412718","wikidata":"https://www.wikidata.org/wiki/Q855395","display_name":"Interpretation (philosophy)","level":2,"score":0.3452000021934509},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.34310001134872437},{"id":"https://openalex.org/C95609273","wikidata":"https://www.wikidata.org/wiki/Q5975208","display_name":"IT risk management","level":3,"score":0.33719998598098755},{"id":"https://openalex.org/C11489865","wikidata":"https://www.wikidata.org/wiki/Q944806","display_name":"Operational risk","level":3,"score":0.3345000147819519},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.30070000886917114},{"id":"https://openalex.org/C182566","wikidata":"https://www.wikidata.org/wiki/Q759524","display_name":"Organizational structure","level":2,"score":0.2976999878883362},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.2948000133037567},{"id":"https://openalex.org/C554936623","wikidata":"https://www.wikidata.org/wiki/Q199657","display_name":"Reading (process)","level":2,"score":0.2939000129699707},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.29159998893737793},{"id":"https://openalex.org/C7493553","wikidata":"https://www.wikidata.org/wiki/Q1520777","display_name":"Certainty","level":2,"score":0.27639999985694885},{"id":"https://openalex.org/C2776305056","wikidata":"https://www.wikidata.org/wiki/Q7257723","display_name":"Public disclosure","level":2,"score":0.27140000462532043},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.26919999718666077},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.2651999890804291},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.25699999928474426},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2515999972820282},{"id":"https://openalex.org/C201305675","wikidata":"https://www.wikidata.org/wiki/Q852998","display_name":"Stakeholder","level":2,"score":0.2500999867916107}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.24049686","doi":"https://doi.org/10.5281/zenodo.24049686","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24049686","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},{"id":"doi:10.5281/zenodo.24049687","doi":"https://doi.org/10.5281/zenodo.24049687","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24049687","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"}],"best_oa_location":{"id":"doi:10.5281/zenodo.24049686","doi":"https://doi.org/10.5281/zenodo.24049686","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24049686","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},"sustainable_development_goals":[{"display_name":"Peace, justice, and strong institutions","score":0.47620001435279846,"id":"https://metadata.un.org/sdg/16"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W37797188","https://openalex.org/W7169828747","https://openalex.org/W3010179884","https://openalex.org/W2741570606","https://openalex.org/W7172510726","https://openalex.org/W2794845779","https://openalex.org/W7098291966","https://openalex.org/W1969286156","https://openalex.org/W2114497597","https://openalex.org/W7202039140"],"abstract_inverted_index":{"Organisations":[0],"that":[1,125,195],"run":[2],"large":[3],"public":[4,19,54,74],"operations":[5],"distribute":[6],"risk":[7,22,49,92,105,197],"management":[8,198],"across":[9,51,129],"contracted":[10,56],"security":[11],"providers,":[12],"operational":[13],"managers,":[14],"digital":[15,59],"teams,":[16],"executives":[17],"and":[18,26,36,58,93,96,107,194,199,218,230],"authorities.":[20],"Enterprise":[21],"management,":[23],"high-reliability":[24,200],"organising":[25],"resilience":[27],"engineering":[28],"offer":[29],"partially":[30],"competing":[31],"perspectives":[32],"on":[33,205,224],"prioritisation,":[34],"interpretation":[35],"adaptation":[37],"in":[38,139,227],"these":[39,174],"arrangements.":[40],"This":[41],"article":[42,110,172],"asks":[43],"how":[44],"organisations":[45],"should":[46],"structure":[47],"layered":[48],"assurance":[50],"corporate":[52],"operations,":[53],"gatherings,":[55],"services":[57],"infrastructure.":[60],"It":[61],"conducts":[62],"a":[63,77,81,136,140,181],"structured":[64],"documentary":[65],"analysis":[66,222],"of":[67,71,89,104,191],"the":[68,86,90,109,146,163,183],"published":[69,87],"findings":[70],"an":[72],"official":[73],"inquiry":[75,101,226],"into":[76],"mass-casualty":[78],"attack":[79],"at":[80],"UK":[82],"arena,":[83],"read":[84],"alongside":[85],"scopes":[88],"principal":[91],"continuity":[94],"standards":[95],"intergovernmental":[97],"mass-gathering":[98],"guidance.":[99],"The":[100,118,152,171,221],"documents":[102],"failures":[103],"assessment":[106,142],"coordination;":[108],"interprets":[111],"them":[112,166],"through":[113],"two":[114],"proposed":[115],"design":[116],"mechanisms.":[117],"first":[119],"is":[120,154],"aggregation":[121],"failure:":[122],"scoring":[123],"instruments":[124],"average":[126],"or":[127],"net":[128],"hazards":[130],"arithmetically":[131],"suppress":[132],"low-frequency,":[133],"high-severity":[134],"hazards,":[135],"mechanism":[137],"visible":[138],"counterterrorism":[141],"rated":[143],"low":[144],"while":[145,162],"national":[147],"threat":[148],"level":[149],"was":[150],"severe.":[151],"second":[153],"interface":[155,216],"non-ownership:":[156],"responsibilities":[157],"were":[158,167],"allocated":[159,168],"to":[160,169,187],"parties":[161],"junctions":[164],"between":[165],"none.":[170],"argues":[173],"defects":[175],"are":[176],"architectural":[177],"rather":[178],"than":[179],"attitudinal,":[180],"reading":[182],"inquiry's":[184],"own":[185],"refusal":[186],"find":[188],"deliberate":[189],"compromise":[190],"safety":[192],"supports":[193],"enterprise":[196],"theory":[201],"give":[202],"contradictory":[203],"instructions":[204],"aggregation.":[206],"A":[207],"Multi-Layer":[208],"Risk":[209],"Assurance":[210],"Model":[211],"specifies":[212],"severity-gated":[213],"registers,":[214],"named":[215],"owners":[217],"verification":[219],"modes.":[220],"rests":[223],"one":[225,228],"jurisdiction":[229],"establishes":[231],"no":[232],"counterfactual.":[233]},"counts_by_year":[],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2026-11-09T00:00:00"}