This diploma thesis deals with the review of the current state of the information system in the firm, which focuses on localisation. The paper defines theoretical terms which are necessary to in order to understand the area of information systems with regard to its structure and operating. The environment of the firme is described together with the analysis of the information systém in use. With the information collected from the analyses and the questionere we are able to identify the risk areas. The identified risks are treated on the basis of severity by proposing changes and then economically evaluated.

The master thesis deals with the issue of risk management in a selected business entity. The subject of the research is the risks of the selected entity. The object of the research is a Slovak company with the changed name Betolta, a.s., that main activity is the production of reinforced concrete precast units. The thesis is divided into seven chapters. The thesis deals in more detail with the current state of the researched issues, identification, analysis and evaluation of risks using the methods of strategic situational analysis. The conclusion of the work deals with proposals and recommendations for improving the identified situation.

The process analysis provides a good way for identification (stock-taking) of the weak points in the firms in these days, when the waste is restricted, continual improvement is required and the crisis is one of the most frequent word in use. If such point was already found it is necessary to apply efficient remedial measure to provide against financial or information leakage. This master’s thesis is about Materials handling risk analysis.

This diploma thesis focuses on ways to ensure safety in case of extraordinary events in the company Skanska Inc. The introductory part of the thesis deals with the description of related issues, including legislation. The next section presents an emergency plan prepared to protect the property and lives and health of persons in a particular object in case of identified extraordinary events, based on risk assessment, and proposed solutions to eliminate these adverse events.

Brownfields are one of the unfavorable parts of industrial heritage that developed from 18th to 20th century. Brownfields are very different and in most cases they have negative impact on the environment. Crucial for this thesis were brownfields with certain level of contaminations. The site of a former refinery of mineral oils OSTRAMO, which represents ecological burden, is a brownfield that can threaten the environment in all its compartments. This was the reason why OSTRAMO was selected for this thesis. The goal of this thesis was to evaluation of ecotoxicological effects of contaminated samples taken from the location via ecotoxicity testing in aquatic and contact arrangement. The result of each test confirmed expected negative impact of the samples from the location of former rafinery on testing organisms.

El presente trabajo tiene como objetivo desarrollar un plan de recuperación ante desastres para una empresa peruana de telecomunicaciones, tomando como un marco de referencia a la norma americana NIST 800-34, para ello se siguió los 7 procesos de planificación de contingencias que sugiere la norma. El trabajo está compuesto por 11 capítulos, en los tres primeros capítulos se hacen un acercamiento a la organización con el fin de conocer la estructura interna en el que se explora las situaciones problemáticas que afronta la organización, así mismo se definen los objetivos que serán clave para el desarrollo de todo el proyecto, en el marco teórico se analiza a fondo los procesos de la norma y los conceptos necesarios para comprender el tema. En el capítulo 4 se desarrolla ampliamente el plan de recuperación ante desastres, para ello se hace un análisis de impacto de negocio con el que se logra determinar los tres procesos críticos del negocio, como parte de este proceso se realiza un análisis de riesgo de todos los recursos que intervienen en los procesos críticos, dicho análisis sirve de entrada para definir los seis escenarios de desastre, así mismo se desarrollaron las estrategias que permitan actuar ante dichos escenarios, se definen los recursos necesarios, los roles y responsabilidades de los equipos de respuesta, por otro lado se realizaron pruebas y ejercicios de los sistemas implementados para garantizar su eficacia ante un escenario real. Por último, se hace un análisis de los resultados y se brinda las conclusiones y recomendaciones. / This paper aims to develop a disaster recovery plan for a Peruvian telecommunications company, taking as a frame of reference the American standard NIST 800-34, for this the 7 contingency planning processes suggested by the standard were followed.  The work is composed of 11 chapters, in the first three chapters an approach to the organization is made in order to know the internal structure in which the problematic situations that the organization faces are explored, as well as defining the objectives that will be key For the development of the entire project, in the theoretical framework the processes of the standard and the concepts necessary to understand the subject are thoroughly analyzed. In Chapter 4, the disaster recovery plan is widely developed as such, for this a business impact analysis is made with which it is possible to determine the three critical processes of the business, as part of this process a risk analysis of all assets is performed that intervene in the critical processes, this analysis serves as input to define the six disaster scenarios, as well as the strategies that allow acting in these scenarios, the necessary resources, roles and responsibilities of the response teams are defined, by On the other hand, tests and exercises of the systems implemented were carried out to guarantee their effectiveness in a real scenario. Finally, an analysis of the results is made, and the conclusions and recommendations are provided. / Tesis

This thesis treats the historical development of the marine industry worldwide and its relation to risk analysis during the 60 year period of 1950 to 2010. The relation between the two is found through analysis of what risks connect the two and drive the development of technology and legislation during different time periods. There is little to no previous research on this particular subject particularly using a risk perspective of complex systems. To do this it became necessary to write a summary of the development of the maritime industry in technological and legislative terms, in modern time, while at the same time revealing clear insights in how this development works. The summary is based on a wide variety of different sources, and therefore gives a reasonably accurate description of the development given the period and scope looked at. Generalizing the development is found to be that risks force legislative changes, and that technological development is sometimes responsible for causing the risks. That said, many technological developments also help reduce overall risk. The major conclusion drawn is that when a risk is acknowledged there is a conscious effort made to minimize or eliminate it, which in turn is a development, a system change of sorts that might have generated new risks. Overall the evolution of the maritime industry has led to a system that is resilient towards risks, yet that still responds to risks actively and often rather efficiently once they become apparent.

京都大学 / 新制・課程博士 / 博士(工学) / 甲第24100号 / 工博第5022号 / 新制||工||1748(附属図書館) / 京都大学大学院工学研究科都市環境工学専攻 / (主査)教授 米田 稔, 教授 清水 芳久, 教授 松井 康人 / 学位規則第4条第1項該当 / Doctor of Philosophy (Engineering) / Kyoto University / DFAM

No / Due to the advance of modern computing technology, decisions can be made based on all the existing related data instances scattered across multiple data storages, such that available information has been entirely taken into consideration. Particularly in the predictive toxicology domain, because of the heterogeneity of data sources, multiple data instances with respect to the same endpoint are usually inconsistent, and the quality (or reliability) of the data instances is typically different. Also, the quantity of data instances is often not sufficient to conduct a study using conventional statistics-based methods. This paper presents a novel risk analysis approach for chemical toxicity assessment which considers all the available heterogeneous data instances in the same time, assisted by their quality (or reliability) values. The system is developed on the basis of possibility-probability distribution, where the uncertainty of the approximated probability values based on traditional statistics methods is represented by possibility. The uncertainty considered herein is led not only by the statistics on limited small number of data instances, but also by the poor quality (or reliability) of data instances. The possibility-probability distribution is automatically computed from available data instances by employing a modified diffused-interior-outer-set model (where the reliability of data is considered) based on information diffusion theory. Toxicity value for a given chemical compound is then estimated as the fuzzy expected value based on the resulted possibility-probability distribution. Toxicity risk with respect to regulatory threshold is also introduced, in order to evaluate the probability of which the toxicity may be classified into a certain regulatory range. The proposed approach is applied to a real-world dataset to illustrate the utility and the potential of the approach in risk assessment of chemical toxicity.

Cybersecurity is currently an important and relevant issue, as more and more industries are taking advantage of the accessibility of storing information online. To create a secure system one must know the potential risks and attacks on that system, making risk analysis a very potent tool. In this study, we performed such an analysis using the risk analysis method OCTAVE Allegro on a company providing a cloud-based service to find out what risks a cloud service provider might be exposed to, and the usefulness of said risk analysis method in this circumstance. We found that OCTAVE Allegro is suitable to use on smaller companies and applicable to cloud services, and the most severe risks identified were connected to leakage of client data with a consequence of damaging the company's reputation. Common areas of concern for these risks were third parties hacking the cloud server or other company systems to gain access to sensitive information. Such risks will likely be found at any company providing a cloud service that manages sensitive data, increasing the importance of risk analysis at these companies.