Natural Hazards are a risk to buried gas pipeline infrastructure, but these risks are difficult to assess and quantify. This can often lead to the risks not being properly identified by pipeline owners. The risk to pipelines within landslide areas are particularly difficult to assess given the complex nature of landslide movements and the soil-pipeline interaction mechanisms imposing loads on a pipeline. This thesis research examines the relationship between ground movements and strains/stresses in buried pipelines through field measured ground movements and in-situ measured pipe strains/stresses. The pipe stresses and strains are then used to estimate probability of pipeline failure and risk based on RBDA limit states approaches. Within Manitoba Hydro’s pipeline network, three at-risk landslide areas (riverbank and deep river valleys) were selected for detailed studies. A field investigation and monitoring program was undertaken to assess possible sources of load and stresses on pipelines. Soil, ground, and pipe instrumentation were installed at the sites and monitored over a four year period. Monitoring results identified soil near the pipeline does not freeze, and ground movements at valley sites are slow moving (<50 mm/year) landslides. The monitoring results also showed pipe stresses and behaviour were affected by backfilling, changes in river levels, thermal affects, soil-pipe relaxation, and ground movements. Pipe push tests were conducted in conjunction with FEM modelling to examine pipe adhesion and to possible explain the pipe behaviour observed. Several ultimate and serviceability limit states pipe failure modes were assessed using the measured pipe stresses. Statistical analysis was undertaken to calculate the probability of pipeline failure for the various limit states failure modes and compared against limit states targets for several scenarios (backfill loads, initial stress-state of the pipeline, other pipelines within Manitoba Hydro network). Overall, the probability of failure estimates were generally insignificant or low due to a postulated soil-pipe relaxation mechanism which is causing a repeated release in longitudinal pipe stresses as the landslide continues to accumulate ongoing ground movements. Three mechanisms are presented and discussed. The statistical analysis indicate pipelines within Manitoba Hydro’s network may exceed limit states targets for yielding and local buckling depending on the loading scenario and the class of the pipeline within the landslide area. The outcome of the research was used to develop a risk managements system to examine geotechnical hazards within Manitoba Hydro’s pipeline network. Specifically, risks associated with ground movements along natural slopes and at river crossings are examined within the system. / October 2016

The diploma thesis „Risk Management System in a Critical Infrastructure Entity from the Public Sector“ deals with analysis and evaluation of current risk management settings. The public sector is a special category of entities whose importance is often neglected and not properly set. The vision of the first part of the thesis is to provide theoretical knowledge and perspective on the issue of risk management in critical infrastructure in the public sector. The second part contains an analysis of the current state of a specific subject of critical infrastructure in the area of a public administration and provides and subsequent draft measures to make it more effective.

Dagens avverkningsindustri har under de senaste årtionden mekaniserat med tyngre maskiner som ökar effektiviteten och precisionen av arbetsprocessen. Det är viktigt att konstant anpassa arbetsrutiner och säkerhetsarbetet till den snabbt utvecklande arbetsmiljön. Organisationens säkerhetskultur är en bra indikator på hur väl säkerhetsarbetet genomförs och ger en god insikt på hur säkerheten hanteras på individ- och organisationsnivå. En metod för att undersöka säkerhetsmognaden är att analysera företagets anställda på olika nivåer inom verksamheten och se hur de olika rollerna arbetar med ett antal viktiga aspekter för säkerhetsarbete. Därför har rapporten som syfte att svara på följande forskningsfrågor: (1) Är digitala enkäter lämpliga verktyg för att samla in relevant data för att bedöma säkerhetskulturen hos ett företag? (2) Kan den nuvarande säkerhetskulturen hos Stora Enso bedömas med hjälp av Bradley Curve och i så fall vad är mognadsgraden? (3) Vad för förbättringsförslag kan vi ge på Stora Ensos nuvarande riskhanteringssystem? Genom att skicka ut enkäter till anställda, kunde information om deras bemötande i viktiga säkerhetsfrågor kvantifieras med hjälp av ett numeriskt poängsystem. Enkätverktyget samlade in ett bra antal svar som visade en god tillförlitlighet, vilket innebär att enkäter är ett lämpligt verktyg för relevant datainsamling. Stora Ensos säkerhetskultur kan bedömas med hjälp av Bradley Curve, som visar att verksamheten har nått independent-nivån på kurvan. Genom att uppmuntra anställda till att rapportera flera incidenter och tillbud och använda sig av tillgängliga säkerhetsverktyg, kan man förbättra kommunikationen och därmed säkerhetskulturen och utvecklingsarbetet inom företaget. / The logging industry today has mechanized with heavier machinery over the past decades, increasing the efficiency and precision of the work process. It is important to constantly adapt work routines and safety practices to the rapidly evolving work environment. The organization's safety culture is a good indicator of how well safety practices are implemented and provides good insight into how safety is managed at both the individual and organizational levels. A method to investigate safety maturity is to analyze the company's employees at various levels within the organization and see how the different roles work with several important aspects of safety work. Therefore, the report aims to answer the following research questions: (1) Are digital surveys suitable tools for collecting relevant data to assess a company's safety culture? (2) Can the current safety culture at Stora Enso be assessed using the Bradley Curve and, if so, what is the maturity level? (3) What improvement suggestions can we provide for Stora Enso's current risk management system? By sending out surveys to employees, information about their responses to important safety issues could be quantified using a numerical scoring system. The survey tool collected a good number of responses that showed good reliability, indicating that surveys are a suitable tool for relevant data collection. Stora Enso's safety culture can be assessed using the Bradley Curve, which shows that the company has reached the independent level on the curve. By encouraging employees to report more incidents and near-misses and to use available safety tools, communication can be improved, thereby enhancing the safety culture and development work within the company.

The thesis is focused on selected risks and theirs management in power sector. In introduction it is analysed power sector in the context of other energy commodities, hereafter it is analysed the approach to power price modelling. Furthermore are analysed the aspects of regulatory risk in Czech Republic. Finally it is evaluated the risk management system of a company in power- utility sector.

This diploma thesis deals with the management of security information, according to ISO/IEC 27005 and it is implementation in the Verinice software environment. The risk information management process is applied to a critical infrastructure, that is connected to a optical fiber network. The work focuses on incidents aimed at threatening data from optical threats and active network elements in transmission systems. The result of the work is defined as a risk file in the .VNA format containing identified risks, for which appropriate measures are implemented in connection with the requirements of ISO/IEC 27001, for the protection of critical infrastructures and transmitted data in the transmission system.

The banking industry is one of the critical infrastructures in any economy. The services rendered by banks are systematically based on innovation, products, and technology to leverage their services. Several associated risks come along with the rendering of these banking services. The protection of critical information assets of any banking organization should be a top priority of the management. They must ensure that adequate provision is made to develop a strong strategy to control, reduce, and mitigate tasks, such as fraud, cyber-attacks, and other forms of cybersecurity exploitations.  Risk management is a series of actions to identify, assess and control threats and vulnerabilities in an organization's capital investment and revenue. These potential risks arise from diverse sources like credit risk, liquidity risk, financial uncertainties, legal actions, technology failures, business strategic management errors, accidental occurrences, and natural disasters.  This research study aimed to investigate the factors influencing the implementation of information security risk management in Nigerian Commercial Banks, using a social-technical system framework to address a fundamental human risk factor, which contributes predominately to the failure in information security risk management. These research was motivated by the fact that Nigerian banking sector is facing serious threats' threat emanate from cyber-attacks. Evidenced by the ever-increasing cyber-attacks, as demonstrated by a total of 1,612 complaints from consumers of financial services over banking fraud and aggressive charges received between July and December 2018 of which 99.38% of these incidences were against the commercial banks. The banks are faced with a lot of vulnerabilities and cybersecurity threats, and most of the attacks that happened within the banking sector are focused on the customers, and employees through phishing and social engineering. These showed weaknesses in information security management within the Nigerian banking industry.  However, the study was guided by the social-technical theory that advocates for overall training to the stakeholders that helps in changing their beliefs and norms about organization of IS security. In order to find out the factors influencing the implementation of information security risks management in respect of Nigerian Commercial Banks, this study evaluated the influence of management support, technical experts support, funding and users’ security awareness to curb the cyber-attacks in Nigerian financial sector. The contribution of this research is expected to lead to the improvement in the financial system, and organizations, where cybersecurity and information security risk management processes are taken seriously, to reduce the high level of information security risk, threats, and vulnerabilities. Nigeria is a developing country, and at the same time fighting to develop a more conducive business investment environment to attract both national and international investors.  A mixed approach research (qualitative and quantitative) method was used to validate this research study. Data collection tools used included interviews and questionnaires. Data analysis was done using the SPSS and logistic regression model.