A Risk Management Approach to Data Preservation
Transcript of A Risk Management Approach to Data Preservation
![Page 1: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/1.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
Ricardo Vieira* ([email protected])
A Risk Management Approach to Data Preservation
euroCRIS Membership Meeting – Porto, Portugal, 14th-15th November 2013
![Page 2: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/2.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
Digital Preservation
• Digital Preservation (DP) aims at maintaining valuable digital objects accessible over long periods of time
» Problem initially triggered by memory institutions where DP is a main concern
» Nowadays, widely present as a generalized concern of organizations
» How to address it?
euroCRIS Membership Meeting – Porto, Portugal, 14th-15th November 2013
![Page 3: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/3.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
Risk Management Overview
• Risk Management defines prevention and control mechanisms to address the risk attached to specific activities and valuable assets
euroCRIS Membership Meeting – Porto, Portugal, 14th-15th November 2013
![Page 4: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/4.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
Digital Preservation as a Risk Management Activity
• The goal of DP is to protect digital information against several threats that can affect their proper use and interpretation
euroCRIS Membership Meeting – Porto, Portugal, 14th-15th November 2013
![Page 5: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/5.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
Risk Management Approach to Data Preservation
euroCRIS Membership Meeting – Porto, Portugal, 14th-15th November 2013
![Page 6: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/6.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
Establish the Context (1/2)
euroCRIS Membership Meeting – Porto, Portugal, 14th-15th November 2013
![Page 7: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/7.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
Establish the Context (2/2)
• Identify strategic objects and define criteria to determine which consequences are acceptable to the specific context. – Identify Stakeholders – Identify the context (Organisational,
Technical and Legal)
euroCRIS Membership Meeting – Porto, Portugal, 14th-15th November 2013
![Page 8: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/8.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
Context Model
• The context model is represented as a set of ontologies • Ontologies formalize knowledge representation • Information can be extracted from ontologies through
querying and processing (e.g. reasoning, logical inference)
euroCRIS Membership Meeting – Porto, Portugal, 14th-15th November 2013
DIO (ArchiMate) DSO-1DIO-DSO1
Transformation Map
DIO-DSO2Transformation Map DSO-2
![Page 9: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/9.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
Risk Assessment
euroCRIS Membership Meeting – Porto, Portugal, 14th-15th November 2013
![Page 10: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/10.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
Risk Identification
• Identify…. – Assets – Vulnerabilities – Threats – Risks
euroCRIS Membership Meeting – Porto, Portugal, 14th-15th November 2013
![Page 11: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/11.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
Risk-DL Domain Language (1/2)
• Concepts mapped to ISO 31000
• Concepts formalized using the relational model
• Risk-DL to represente concepts – Interoperability – Sharing, discovery, reuse • Alignment between risks and organization artifacts • Reduce inconsistencies (formalization of risks) • Open specification -> support human-machine and machine-machine
communication • XML properties:
• Portability • Extensibility • Etc.
euroCRIS Membership Meeting – Porto, Portugal, 14th-15th November 2013
![Page 12: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/12.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
Risk-DL Domain Language (2/2)
euroCRIS Membership Meeting – Porto, Portugal, 14th-15th November 2013
![Page 13: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/13.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
Risk Analysis (1/2)
• Impact
• Likelihood
• Risk Level
euroCRIS Membership Meeting – Porto, Portugal, 14th-15th November 2013
![Page 14: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/14.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
Risk Analysis (2/2)
euroCRIS Membership Meeting – Porto, Portugal, 14th-15th November 2013
![Page 15: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/15.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
Scenario Evaluation
euroCRIS Membership Meeting – Porto, Portugal, 14th-15th November 2013
![Page 16: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/16.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
Risk Evaluation
• Based on the outcome of risk analysis, decided which risks need treatment and the priority for treatment implementation – Compare level of risk with initial criteria
• Scenario evaluation: – DP mitigates the risk level for 19 risks – Costs without DP: 6,316,520 €/year – Costs with DP: 909,720€/year – Risk cost reduction of 5,406,800 €/year (=86%)
euroCRIS Membership Meeting – Porto, Portugal, 14th-15th November 2013
𝐶𝐶𝐶𝐶𝐶 = �𝐿𝐿𝐿𝐿𝐿𝐿𝐿𝐶𝐶𝐿𝑅𝑅𝑅𝑅 𝑖 ∗ 𝑅
𝐼𝐼𝐼𝐼𝐼𝐶𝑅𝑅𝑅𝑅 𝑖
![Page 17: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/17.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
euroCRIS Membership Meeting – Porto, Portugal, 14th-15th November 2013
![Page 18: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/18.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
14 November 2013
timbusproject.net © 2011 18
Risk Treatment
![Page 19: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/19.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
Conclusions
• Using risk management we are able to leverage the digital preservation problem – Better understanding of the problem – Better understanding of the solution
• This is valid to other concerns!!!
• Same approach is being applied to Data Management in e-Science
project Ferreira, F., Coimbra, M., Vieira, R., Proença, D., Freitas, A., Russo, L., Borbinha, J., Risk Aware Data Management in Metagenomics, 5th INForum (INForum 2013), Évora, Portugal, September 5-6, 2013
euroCRIS Membership Meeting – Porto, Portugal, 14th-15th November 2013
![Page 20: A Risk Management Approach to Data Preservation](https://reader031.fdocuments.net/reader031/viewer/2022012021/61689d46d394e9041f71271d/html5/thumbnails/20.jpg)
INESC-ID Information Systems Group, Lisbon, Portugal
technology from seed
euroCRIS Membership Meeting – Porto, Portugal, 14th-15th November 2013
technology from seed
Ricardo Vieira– [email protected]