Cyber Risk Management and Organisational Alignment Using Endley’s Risk Management Model: Computational Analysis from an Adaptive Dynamical System Perspective

Debby Bouma; Thijmen Den Oudsten; Adam Naffakh; Manir Waliji; Jan Treur; Peter H.M.P. Roelofsma

doi:10.1007/978-3-031-96798-6_31

Cyber Risk Management and Organisational Alignment Using Endley’s Risk Management Model: Computational Analysis from an Adaptive Dynamical System Perspective

Debby Bouma, Thijmen Den Oudsten, Adam Naffakh, Manir Waliji, Jan Treur^*, Peter H.M.P. Roelofsma

^*Corresponding author for this work

Artificial Intelligence

Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

Abstract

In this paper a novel approach is introduced to improve cyber risk management and organizational alignment. It is illustrated for a case study concerning the Amsterdam Airport at Schiphol. It applies Endsley’s Risk Management Model to understand threats at different levels. An adaptive dynamical system model specifically designed for this cyber domain will be proposed, addressing the interconnectedness of vulnerabilities. This includes adaptation mechanisms to account for ocurring threats. A controlled experiment will then evaluate the model’s effectiveness in enhancing situational awareness and its impact on risk management and alignment. The research also explores future risks using What-If analysis and probabilistic risk assessment.

Original language	English
Title of host publication	Artificial Intelligence for System Oriented Design
Subtitle of host publication	Proceedings of 8th Computational Methods in Systems and Software 2024, Volume 1
Editors	Radek Silhavy, Petr Silhavy
Publisher	Springer Nature
Pages	422-444
Number of pages	23
Volume	1
ISBN (Electronic)	9783031967986
ISBN (Print)	9783031967979
DOIs	https://doi.org/10.1007/978-3-031-96798-6_31
Publication status	Published - 2025
Event	8th International Conference on Computational Methods in Systems and Software, CoMeSySo 2024 - Duration: 12 Oct 2024 → 14 Oct 2024

Publication series

Name	Lecture Notes in Networks and Systems
Publisher	Springer
Volume	1489 LNNS
ISSN (Print)	2367-3370
ISSN (Electronic)	2367-3389

Name	CoMeSySo: Proceedings of the Computational Methods in Systems and Software
Publisher	Springer
Volume	2024

Conference

Conference	8th International Conference on Computational Methods in Systems and Software, CoMeSySo 2024
Period	12/10/24 → 14/10/24

Bibliographical note

Publisher Copyright:
© The Author(s), under exclusive license to Springer Nature Switzerland AG 2025.

Keywords

Adaptive Dynamical System Model
Cyber Risk
Endley Management Model

Access to Document

10.1007/978-3-031-96798-6_31

Persistent URL (handle)

Persistent link

Cite this

Bouma, D., Den Oudsten, T., Naffakh, A., Waliji, M., Treur, J., & Roelofsma, P. H. M. P. (2025). Cyber Risk Management and Organisational Alignment Using Endley’s Risk Management Model: Computational Analysis from an Adaptive Dynamical System Perspective. In R. Silhavy, & P. Silhavy (Eds.), Artificial Intelligence for System Oriented Design: Proceedings of 8th Computational Methods in Systems and Software 2024, Volume 1 (Vol. 1, pp. 422-444). (Lecture Notes in Networks and Systems; Vol. 1489 LNNS), (CoMeSySo: Proceedings of the Computational Methods in Systems and Software; Vol. 2024). Springer Nature. https://doi.org/10.1007/978-3-031-96798-6_31

Bouma, Debby ; Den Oudsten, Thijmen ; Naffakh, Adam et al. / Cyber Risk Management and Organisational Alignment Using Endley’s Risk Management Model : Computational Analysis from an Adaptive Dynamical System Perspective. Artificial Intelligence for System Oriented Design: Proceedings of 8th Computational Methods in Systems and Software 2024, Volume 1. editor / Radek Silhavy ; Petr Silhavy. Vol. 1 Springer Nature, 2025. pp. 422-444 (Lecture Notes in Networks and Systems). (CoMeSySo: Proceedings of the Computational Methods in Systems and Software).

@inproceedings{bcea3da17c5a4f458b26541338cb5191,

title = "Cyber Risk Management and Organisational Alignment Using Endley{\textquoteright}s Risk Management Model: Computational Analysis from an Adaptive Dynamical System Perspective",

abstract = "In this paper a novel approach is introduced to improve cyber risk management and organizational alignment. It is illustrated for a case study concerning the Amsterdam Airport at Schiphol. It applies Endsley{\textquoteright}s Risk Management Model to understand threats at different levels. An adaptive dynamical system model specifically designed for this cyber domain will be proposed, addressing the interconnectedness of vulnerabilities. This includes adaptation mechanisms to account for ocurring threats. A controlled experiment will then evaluate the model{\textquoteright}s effectiveness in enhancing situational awareness and its impact on risk management and alignment. The research also explores future risks using What-If analysis and probabilistic risk assessment.",

keywords = "Adaptive Dynamical System Model, Cyber Risk, Endley Management Model",

author = "Debby Bouma and \{Den Oudsten\}, Thijmen and Adam Naffakh and Manir Waliji and Jan Treur and Roelofsma, \{Peter H.M.P.\}",

note = "Publisher Copyright: {\textcopyright} The Author(s), under exclusive license to Springer Nature Switzerland AG 2025.; 8th International Conference on Computational Methods in Systems and Software, CoMeSySo 2024 ; Conference date: 12-10-2024 Through 14-10-2024",

year = "2025",

doi = "10.1007/978-3-031-96798-6\_31",

language = "English",

isbn = "9783031967979",

volume = "1",

series = "Lecture Notes in Networks and Systems",

publisher = "Springer Nature",

pages = "422--444",

editor = "Radek Silhavy and Petr Silhavy",

booktitle = "Artificial Intelligence for System Oriented Design",

address = "Switzerland",

}

Bouma, D, Den Oudsten, T, Naffakh, A, Waliji, M, Treur, J & Roelofsma, PHMP 2025, Cyber Risk Management and Organisational Alignment Using Endley’s Risk Management Model: Computational Analysis from an Adaptive Dynamical System Perspective. in R Silhavy & P Silhavy (eds), Artificial Intelligence for System Oriented Design: Proceedings of 8th Computational Methods in Systems and Software 2024, Volume 1. vol. 1, Lecture Notes in Networks and Systems, vol. 1489 LNNS, CoMeSySo: Proceedings of the Computational Methods in Systems and Software, vol. 2024, Springer Nature, pp. 422-444, 8th International Conference on Computational Methods in Systems and Software, CoMeSySo 2024, 12/10/24. https://doi.org/10.1007/978-3-031-96798-6_31

Cyber Risk Management and Organisational Alignment Using Endley’s Risk Management Model: Computational Analysis from an Adaptive Dynamical System Perspective. / Bouma, Debby; Den Oudsten, Thijmen; Naffakh, Adam et al.
Artificial Intelligence for System Oriented Design: Proceedings of 8th Computational Methods in Systems and Software 2024, Volume 1. ed. / Radek Silhavy; Petr Silhavy. Vol. 1 Springer Nature, 2025. p. 422-444 (Lecture Notes in Networks and Systems; Vol. 1489 LNNS), (CoMeSySo: Proceedings of the Computational Methods in Systems and Software; Vol. 2024).

Research output: Chapter in Book / Report / Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Cyber Risk Management and Organisational Alignment Using Endley’s Risk Management Model

T2 - 8th International Conference on Computational Methods in Systems and Software, CoMeSySo 2024

AU - Bouma, Debby

AU - Den Oudsten, Thijmen

AU - Naffakh, Adam

AU - Waliji, Manir

AU - Treur, Jan

AU - Roelofsma, Peter H.M.P.

PY - 2025

Y1 - 2025

N2 - In this paper a novel approach is introduced to improve cyber risk management and organizational alignment. It is illustrated for a case study concerning the Amsterdam Airport at Schiphol. It applies Endsley’s Risk Management Model to understand threats at different levels. An adaptive dynamical system model specifically designed for this cyber domain will be proposed, addressing the interconnectedness of vulnerabilities. This includes adaptation mechanisms to account for ocurring threats. A controlled experiment will then evaluate the model’s effectiveness in enhancing situational awareness and its impact on risk management and alignment. The research also explores future risks using What-If analysis and probabilistic risk assessment.

AB - In this paper a novel approach is introduced to improve cyber risk management and organizational alignment. It is illustrated for a case study concerning the Amsterdam Airport at Schiphol. It applies Endsley’s Risk Management Model to understand threats at different levels. An adaptive dynamical system model specifically designed for this cyber domain will be proposed, addressing the interconnectedness of vulnerabilities. This includes adaptation mechanisms to account for ocurring threats. A controlled experiment will then evaluate the model’s effectiveness in enhancing situational awareness and its impact on risk management and alignment. The research also explores future risks using What-If analysis and probabilistic risk assessment.

KW - Adaptive Dynamical System Model

KW - Cyber Risk

KW - Endley Management Model

UR - https://www.scopus.com/pages/publications/105015303426

UR - https://www.scopus.com/inward/citedby.url?scp=105015303426&partnerID=8YFLogxK

U2 - 10.1007/978-3-031-96798-6_31

DO - 10.1007/978-3-031-96798-6_31

M3 - Conference contribution

AN - SCOPUS:105015303426

SN - 9783031967979

VL - 1

T3 - Lecture Notes in Networks and Systems

SP - 422

EP - 444

BT - Artificial Intelligence for System Oriented Design

A2 - Silhavy, Radek

A2 - Silhavy, Petr

PB - Springer Nature

Y2 - 12 October 2024 through 14 October 2024

ER -

Bouma D, Den Oudsten T, Naffakh A, Waliji M, Treur J, Roelofsma PHMP. Cyber Risk Management and Organisational Alignment Using Endley’s Risk Management Model: Computational Analysis from an Adaptive Dynamical System Perspective. In Silhavy R, Silhavy P, editors, Artificial Intelligence for System Oriented Design: Proceedings of 8th Computational Methods in Systems and Software 2024, Volume 1. Vol. 1. Springer Nature. 2025. p. 422-444. (Lecture Notes in Networks and Systems). (CoMeSySo: Proceedings of the Computational Methods in Systems and Software). Epub 2025 Aug 30. doi: 10.1007/978-3-031-96798-6_31

Cyber Risk Management and Organisational Alignment Using Endley’s Risk Management Model: Computational Analysis from an Adaptive Dynamical System Perspective

Abstract

Publication series

Conference

Bibliographical note

Keywords

Access to Document

Persistent URL (handle)

Other files and links

Embargoed Document

Fingerprint

Cite this