{"id":"https://openalex.org/W4415789864","doi":"https://doi.org/10.1007/s10207-025-01147-4","title":"A Model-Based Framework for Developing Security-Safety Incident Response Plans","display_name":"A Model-Based Framework for Developing Security-Safety Incident Response Plans","publication_year":2025,"publication_date":"2025-11-03","ids":{"openalex":"https://openalex.org/W4415789864","doi":"https://doi.org/10.1007/s10207-025-01147-4"},"language":"en","primary_location":{"id":"doi:10.1007/s10207-025-01147-4","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-025-01147-4","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-025-01147-4.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10207-025-01147-4.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5092033670","display_name":"Vahiny Gnanasekaran","orcid":"https://orcid.org/0009-0003-2865-2115"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":true,"raw_author_name":"Vahiny Gnanasekaran","raw_affiliation_strings":["Norwegian University of Science and Technology, O. S. Bragstad Plass 2A, 7491, Trondheim, Norway"],"raw_orcid":"https://orcid.org/0009-0003-2865-2115","affiliations":[{"raw_affiliation_string":"Norwegian University of Science and Technology, O. S. Bragstad Plass 2A, 7491, Trondheim, Norway","institution_ids":["https://openalex.org/I204778367"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103269632","display_name":"Urooj Fatima","orcid":"https://orcid.org/0009-0009-7635-1601"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Urooj Fatima","raw_affiliation_strings":["Norwegian University of Science and Technology, O. S. Bragstad Plass 2A, 7491, Trondheim, Norway"],"raw_orcid":"https://orcid.org/0009-0009-7635-1601","affiliations":[{"raw_affiliation_string":"Norwegian University of Science and Technology, O. S. Bragstad Plass 2A, 7491, Trondheim, Norway","institution_ids":["https://openalex.org/I204778367"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072285945","display_name":"Magdalena Glas","orcid":"https://orcid.org/0000-0003-0239-7526"},"institutions":[{"id":"https://openalex.org/I60668342","display_name":"University of Regensburg","ror":"https://ror.org/01eezs655","country_code":"DE","type":"education","lineage":["https://openalex.org/I60668342"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Magdalena Glas","raw_affiliation_strings":["University of Regensburg, Universit\u00e4tstr. 31, 93053, Regensburg, Germany"],"raw_orcid":"https://orcid.org/0000-0003-0239-7526","affiliations":[{"raw_affiliation_string":"University of Regensburg, Universit\u00e4tstr. 31, 93053, Regensburg, Germany","institution_ids":["https://openalex.org/I60668342"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5032464896","display_name":"Poul E. Heegaard","orcid":"https://orcid.org/0000-0003-0083-5860"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Poul Einar Heegaard","raw_affiliation_strings":["Norwegian University of Science and Technology, O. S. Bragstad Plass 2A, 7491, Trondheim, Norway"],"raw_orcid":"https://orcid.org/0000-0003-0083-5860","affiliations":[{"raw_affiliation_string":"Norwegian University of Science and Technology, O. S. Bragstad Plass 2A, 7491, Trondheim, Norway","institution_ids":["https://openalex.org/I204778367"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5092033670"],"corresponding_institution_ids":["https://openalex.org/I204778367"],"apc_list":{"value":3190,"currency":"USD","value_usd":3190},"apc_paid":{"value":3190,"currency":"USD","value_usd":3190},"fwci":5.9053,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.96374085,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"24","issue":"6","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.30390000343322754,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.30390000343322754,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.08150000125169754,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11357","display_name":"Risk and Safety Analysis","score":0.07429999858140945,"subfield":{"id":"https://openalex.org/subfields/1804","display_name":"Statistics, Probability and Uncertainty"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.7046999931335449},{"id":"https://openalex.org/keywords/relevance","display_name":"Relevance (law)","score":0.6998000144958496},{"id":"https://openalex.org/keywords/incident-response","display_name":"Incident response","score":0.6123999953269958},{"id":"https://openalex.org/keywords/incident-management","display_name":"Incident management","score":0.586899995803833},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5795000195503235},{"id":"https://openalex.org/keywords/notation","display_name":"Notation","score":0.569100022315979},{"id":"https://openalex.org/keywords/modeling-language","display_name":"Modeling language","score":0.47189998626708984},{"id":"https://openalex.org/keywords/sequence-diagram","display_name":"Sequence diagram","score":0.38909998536109924},{"id":"https://openalex.org/keywords/process-modeling","display_name":"Process modeling","score":0.37940001487731934}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7731000185012817},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.7046999931335449},{"id":"https://openalex.org/C158154518","wikidata":"https://www.wikidata.org/wiki/Q7310970","display_name":"Relevance (law)","level":2,"score":0.6998000144958496},{"id":"https://openalex.org/C2985105721","wikidata":"https://www.wikidata.org/wiki/Q13479512","display_name":"Incident response","level":2,"score":0.6123999953269958},{"id":"https://openalex.org/C2780952636","wikidata":"https://www.wikidata.org/wiki/Q13479512","display_name":"Incident management","level":2,"score":0.586899995803833},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5795000195503235},{"id":"https://openalex.org/C45357846","wikidata":"https://www.wikidata.org/wiki/Q2001982","display_name":"Notation","level":2,"score":0.569100022315979},{"id":"https://openalex.org/C179603123","wikidata":"https://www.wikidata.org/wiki/Q1941921","display_name":"Modeling language","level":3,"score":0.47189998626708984},{"id":"https://openalex.org/C153185123","wikidata":"https://www.wikidata.org/wiki/Q1391624","display_name":"Sequence diagram","level":4,"score":0.38909998536109924},{"id":"https://openalex.org/C76956256","wikidata":"https://www.wikidata.org/wiki/Q27610560","display_name":"Process modeling","level":3,"score":0.37940001487731934},{"id":"https://openalex.org/C145644426","wikidata":"https://www.wikidata.org/wiki/Q169411","display_name":"Unified Modeling Language","level":3,"score":0.37209999561309814},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3668999969959259},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3546999990940094},{"id":"https://openalex.org/C85345410","wikidata":"https://www.wikidata.org/wiki/Q851587","display_name":"Business process","level":3,"score":0.35429999232292175},{"id":"https://openalex.org/C2909164965","wikidata":"https://www.wikidata.org/wiki/Q6014597","display_name":"Incident report","level":2,"score":0.3531000018119812},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.35109999775886536},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3418000042438507},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.32339999079704285},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.3174999952316284},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.31679999828338623},{"id":"https://openalex.org/C174998907","wikidata":"https://www.wikidata.org/wiki/Q357662","display_name":"Work in process","level":2,"score":0.313400000333786},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.31040000915527344},{"id":"https://openalex.org/C85890633","wikidata":"https://www.wikidata.org/wiki/Q929673","display_name":"Capability Maturity Model","level":3,"score":0.3012999892234802},{"id":"https://openalex.org/C84945661","wikidata":"https://www.wikidata.org/wiki/Q7366567","display_name":"Root cause","level":2,"score":0.2937000095844269},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.29249998927116394},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27140000462532043},{"id":"https://openalex.org/C2779707562","wikidata":"https://www.wikidata.org/wiki/Q1140525","display_name":"Critical Incident Technique","level":2,"score":0.2709999978542328},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.2671000063419342},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.2646999955177307},{"id":"https://openalex.org/C207505557","wikidata":"https://www.wikidata.org/wiki/Q4374012","display_name":"Business process modeling","level":4,"score":0.2531999945640564},{"id":"https://openalex.org/C149091818","wikidata":"https://www.wikidata.org/wiki/Q2429814","display_name":"Software system","level":3,"score":0.2524000108242035}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1007/s10207-025-01147-4","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-025-01147-4","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-025-01147-4.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},{"id":"pmh:oai:epub.uni-regensburg.de:79371","is_oa":false,"landing_page_url":"http://orcid.org/0009-0009-7635-1601>,","pdf_url":null,"source":{"id":"https://openalex.org/S4306401229","display_name":"University of Regensburg Publication Server (University of Regensburg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I60668342","host_organization_name":"University of Regensburg","host_organization_lineage":["https://openalex.org/I60668342"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"},{"id":"doi:10.5283/epub.79371","is_oa":true,"landing_page_url":"https://doi.org/10.5283/epub.79371","pdf_url":null,"source":{"id":"https://openalex.org/S4306401229","display_name":"University of Regensburg Publication Server (University of Regensburg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I60668342","host_organization_name":"University of Regensburg","host_organization_lineage":["https://openalex.org/I60668342"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"doi:10.1007/s10207-025-01147-4","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-025-01147-4","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-025-01147-4.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G8179350644","display_name":null,"funder_award_id":"326717","funder_id":"https://openalex.org/F4320323299","funder_display_name":"Norges Forskningsr\u00e5d"}],"funders":[{"id":"https://openalex.org/F4320311040","display_name":"Norges Teknisk-Naturvitenskapelige Universitet","ror":"https://ror.org/05xg72x27"},{"id":"https://openalex.org/F4320323299","display_name":"Norges Forskningsr\u00e5d","ror":"https://ror.org/00epmv149"},{"id":"https://openalex.org/F4320327267","display_name":"St. Olavs Hospital Universitetssykehuset i Trondheim","ror":"https://ror.org/01a4hbq44"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415789864.pdf","grobid_xml":"https://content.openalex.org/works/W4415789864.grobid-xml"},"referenced_works_count":36,"referenced_works":["https://openalex.org/W1994814240","https://openalex.org/W2066420624","https://openalex.org/W2068859716","https://openalex.org/W2167479959","https://openalex.org/W2264600102","https://openalex.org/W2338335491","https://openalex.org/W2401684108","https://openalex.org/W2757696154","https://openalex.org/W2773037341","https://openalex.org/W2884626390","https://openalex.org/W2890471059","https://openalex.org/W2967884193","https://openalex.org/W2971177599","https://openalex.org/W3005887481","https://openalex.org/W3108159510","https://openalex.org/W3125058945","https://openalex.org/W3200587221","https://openalex.org/W3203296545","https://openalex.org/W4200258075","https://openalex.org/W4205700270","https://openalex.org/W4224311718","https://openalex.org/W4243932450","https://openalex.org/W4311142913","https://openalex.org/W4312392669","https://openalex.org/W4320921204","https://openalex.org/W4364856165","https://openalex.org/W4379017240","https://openalex.org/W4382581974","https://openalex.org/W4383898261","https://openalex.org/W4399704534","https://openalex.org/W4401878099","https://openalex.org/W4401906637","https://openalex.org/W4402264144","https://openalex.org/W4408812455","https://openalex.org/W4413250198","https://openalex.org/W6962849902"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"Cyberattacks":[1],"are":[2,200],"increasingly":[3],"affecting":[4],"the":[5,21,42,66,97,113,122,136,155,168,180,188,197,208,232,241,247,252],"safe":[6,45],"operation":[7,46],"of":[8,47,138,157,212,234,251],"critical":[9,98],"infrastructure":[10],"(e.g.,":[11],"energy,":[12],"manufacturing)":[13],"and":[14,20,40,44,61,74,100,125,146,173,202,206,210,231,249],"potentially":[15],"endangering":[16],"production,":[17],"people,":[18],"equipment,":[19],"environment.":[22],"A":[23],"cyber-incident":[24],"with":[25,78],"physical":[26],"consequences":[27],"requires":[28],"personnel":[29],"responsible":[30],"for":[31,151,186,204],"aggregating":[32],"log":[33],"information,":[34,229],"analyzing":[35],"root":[36],"cause":[37],"(i.e.,":[38,50],"cybersecurity),":[39],"ensuring":[41],"production":[43],"safety-critical":[48],"systems":[49,165],"safety)":[51],"to":[52,76,95,143],"collaborate.":[53],"For":[54],"this,":[55],"they":[56],"must":[57],"understand":[58],"their":[59,101],"own":[60],"each":[62],"other\u2019s":[63],"roles":[64,99,215],"in":[65,117],"incident":[67,106,148,190,218,253],"response":[68,107,149,191,254],"process,":[69],"as":[70,72],"well":[71],"when":[73],"how":[75,240],"interact":[77],"different":[79,213],"roles.":[80],"To":[81,109],"address":[82],"this":[83,85],"problem,":[84],"paper":[86],"proposes":[87],"a":[88,92,104,118,140,162],"framework":[89,114],"that":[90,196],"utilizes":[91],"model-based":[93,141],"approach":[94,142],"illustrate":[96],"interactions":[102],"within":[103,121],"security-safety":[105,189,217],"plan.":[108,192],"demonstrate":[110],"its":[111],"applicability,":[112],"was":[115],"applied":[116,245],"qualitative":[119],"study":[120],"Norwegian":[123],"oil":[124],"gas":[126],"industry,":[127],"involving":[128],"two":[129,159],"companies.":[130],"This":[131],"research":[132],"sheds":[133],"light":[134],"on":[135],"relevance":[137,156],"applying":[139],"developing":[144],"security":[145],"safety":[147],"plans":[150],"organizations.":[152],"It":[153],"investigates":[154],"using":[158],"modeling":[160,166,178,198],"languages:":[161],"general-purpose":[163],"software":[164],"language,":[167,179],"Unified":[169],"Modeling":[170,183],"Language":[171],"(UML),":[172],"an":[174],"enterprise":[175],"process":[176],"workflow":[177],"Business":[181],"Process":[182],"Notation":[184],"(BPMN),":[185],"visualizing":[187],"The":[193,220],"findings":[194],"indicate":[195],"languages":[199],"suitable":[201],"relevant":[203],"understanding":[205],"discussing":[207],"collaboration":[209],"coordination":[211],"personnel\u2019s":[214],"during":[216,246],"response.":[219],"distinct":[221],"diagrams":[222,242],"highlight":[223],"various":[224],"aspects,":[225],"including":[226],"roles,":[227],"transmitted":[228],"tasks,":[230],"sequence":[233],"tasks.":[235],"Future":[236],"work":[237],"should":[238],"consider":[239],"can":[243],"be":[244],"training":[248],"learning":[250],"plans.":[255]},"counts_by_year":[{"year":2026,"cited_by_count":3}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-11-03T00:00:00"}