An agile IT security model for project risk assessment

There are two fundamental challenges in effectively performing security risk assessment in today's IT projects.The first is the project manager's need to know what IT security risks face the project before the project begins. At this stage IT security staff are unable to answer this question without first knowing the system requirements for the project which are yet to be defined. Second organisations that deal with a large project throughput each year find the current IT security risk assessment process to be tedious and expensive, especially when the same process has to be repeated for each individual project. This also makes it difficult for an organisation to prioritise which projects require more investment in IT security in order to fit within budget constraints. This paper presents a conceptual model that is based on an agile approach to alleviate these challenges. We do this by first analysing two online database resources of vulnerabilities by comparing them to each other, and then compare them to the agile criteria of the conceptual model which we define. The conceptual model is then presented and an example is given of how it can be applied to an actual project. We then briefly discuss what further work needs to be done to implement the conceptual model and validate it against an existing IT project.

Does traditional security risk assessment have a future in information security?

The current information security standards still advocate the use of risk assessment in the prioritisation of security investments. However, prior research on the use of risk assessment methodologies in organisational security has shown that the use of the traditional monolithic risk assessment process described in the current risk management standard is simply not practical at the organisational level. This paper first examines the problems in performing a systematic risk assessment and then discusses the limitations of a traditional risk assessment. To address these limitations, this paper proposes splitting up the current monolithic risk assessment process. The result is an information security assessment framework that puts greater emphasis on situational awareness and allows for better decision making on the prioritization of security investments.

Assessing risk post intervention for an acute coronary syndrome: a review of the risk assessment tools and their development

Considerable variability in survival rate after an acute myocardial infarction exists and accurate risk stratification is of significant importance. The American College of Cardiology and the American Heart Association has recommended early risk stratification using several clinical risk scoring instruments to identify high risk patients. The aim of this paper is to identify secondary cardiovascular risk scoring instruments that could be utilized at the time of intervention for acute coronary syndromes and compare their psychometric properties as they were developed. A search using Medline, Cumulative Index to Nursing and Allied Health Literature and the Psychology and Behavioral Sciences Collection data-bases identified studies published between January 1990 and January 2010 used to measure risk after intervention for acute coronary syndrome. Four validated secondary risk prediction scoring instruments were identified for comparison.Secondary risk prediction scoring instruments for the acute coronary syndrome patient population are evidence based, valid and reliable. Use of the instruments by cardiac focused clinicians will aid in the determination of treatment strategies, and estimation of short and long term events and mortality.

Subjective risk assessment for planning conservation projects

Conservation projects occur under many types of uncertainty. Where this uncertainty can affect achievement of a project's objectives, there is risk. Understanding risks to project success should influence a range of strategic and tactical decisions in conservation, and yet, formal risk assessment rarely features in the guidance or practice of conservation planning. We describe how subjective risk analysis tools can be framed to facilitate the rapid identification and assessment of risks to conservation projects, and how this information should influence conservation planning. Our approach is illustrated with an assessment of risks to conservation success as part of a conservation plan for the work of The Nature Conservancy in northern Australia. Risks can be both internal and external to a project, and occur across environmental, social, economic and political systems. Based on the relative importance of a risk and the level of certainty in its assessment we propose a series of appropriate, project level responses including research, monitoring, and active amelioration. Explicit identification, prioritization, and where possible, management of risks are important elements of using conservation resources in an informed and accountable manner

Characteristics of Mentally Disordered Youth Referred to a Forensic Satellite Clinic for Violence Risk Assessment: A Case Control Study

There is a lack of appropriate services to manage youth with comorbid mental health problems and violence risks. To address this gap, we implemented a forensic satellite clinic in a youth mental health service. This paper characterises offending histories among 45 young patients referred to the clinic, and compares them with matched clinical controls (n = 45). Levels of prior risk taking and aggression were prominent among referred patients. Forensic cases and controls did not differ on demographic and clinical variables, with the exception of psychiatric inpatient admissions, which were higher among referred patients. Group differences were observed for prior offending variables (e.g., physical aggression), which were significantly higher among referred patients than controls. Findings suggest that referrals were made to the clinic based on challenging and aggressive behaviour rather than specific clinical characteristics. The role of specialist assessment, treatment and management of violence risks in youth mental health services are discussed.

Transitioning to routine breast cancer risk assessment and management in primary care: what can we learn from cardiovascular disease?

To capitalise on advances in breast cancer prevention, all women would need to have their breast cancer risk formally assessed. With ~85% of Australians attending primary care clinics at least once a year, primary care is an opportune location for formal breast cancer risk assessment and management. This study assessed the current practice and needs of primary care clinicians regarding assessment and management of breast cancer risk. Two facilitated focus group discussions were held with 17 primary care clinicians (12 GPs and 5 practice nurses (PNs)) as part of a larger needs assessment. Primary care clinicians viewed assessment and management of cardiovascular risk as an intrinsic, expected part of their role, often triggered by practice software prompts and facilitated by use of an online tool. Conversely, assessment of breast cancer risk was not routine and was generally patient- (not clinician-) initiated, and risk management (apart from routine screening) was considered outside the primary care domain. Clinicians suggested that routine assessment and management of breast cancer risk might be achieved if it were widely endorsed as within the remit of primary care and supported by an online risk-assessment and decision aid tool that was integrated into primary care software. This study identified several key issues that would need to be addressed to facilitate the transition to routine assessment and management of breast cancer risk in primary care, based largely on the model used for cardiovascular disease.

Violence risk assessment in psychiatric patients in China: a systematic review

Objectives: The aim of this study was to undertake a systematic review on violence risk assessment instruments used for psychiatric patients in China.

Methods: A systematic search was conducted from 1980 until 2014 to identify studies that used psychometric tools or structured instruments to assess aggression and violence risk. Information from primary studies was extracted, including demographic characteristics of the samples used, study design characteristics, and reliability and validity estimates.

Results: A total of 30 primary studies were identified that investigated aggression or violence; 6 reported on tools assessing aggression while an additional 24 studies reported on structured instruments designed to predict violence. Although measures of reliability were typically good, estimates of predictive validity were mostly in the range of poor to moderate, with only 1 study finding good validity. These estimates were typically lower than that found in previous work for Western samples.

Conclusion: There is currently little evidence to support the use of current violence risk assessment instruments in psychiatric patients in China. Developing more accurate and scalable approaches are research priorities.

Improving risk assessment in schizophrenia: epidemiological investigation of criminal history factors

Background : Violence risk assessment in schizophrenia relies heavily on criminal history factors.

Aims : To investigate which criminal history factors are most strongly associated with violent crime in schizophrenia.

Method : A total of 13 806 individuals (8891 men and 4915 women) with two or more hospital admissions for schizophrenia were followed up for violent convictions. Multivariate hazard ratios for 15 criminal history factors included in different risk assessment tools were calculated. The incremental predictive validity of these factors was estimated using tests of discrimination, calibration and reclassification.

Results : Over a mean follow-up of 12.0 years, 17.3% of men (n = 1535) and 5.7% of women (n = 281) were convicted of a violent offence. Criminal history factors most strongly associated with subsequent violence for both men and women were a previous conviction for a violent offence; for assault, illegal threats and/or intimidation; and imprisonment. However, only a previous conviction for a violent offence was associated with incremental predictive validity in both genders following adjustment for young age and comorbid substance use disorder.

Conclusions : Clinical and actuarial approaches to assess violence risk can be improved if included risk factors are tested using multiple measures of performance.

Delaware Reservoirs’ Drought Risk Assessment: A Paleo View

The Delaware River provides half of New York City's drinking water, is a habitat for wild trout, American shad and the federally endangered dwarf wedge mussel. It has suffered four 100‐year floods in the last seven years. A drought during the 1960s stands as a warning of the potential vulnerability of the New York City area to severe water shortages if a similar drought were to recur. The water releases from three New York City dams on the Delaware River's headwaters impact not only the reliability of the city’s water supply, but also the potential impact of floods, and the quality of the aquatic habitat in the upper river. The goal of this work is to influence the Delaware River water release policies (FFMP/OST) to further benefit river habitat and fisheries without increasing New York City's drought risk, or the flood risk to down basin residents. The Delaware water release policies are constrained by the dictates of two US Supreme Court Decrees (1931 and 1954) and the need for unanimity among four states: New York, New Jersey, Pennsylvania, and Delaware ‐‐ and New York City. Coordination of their activities and the operation under the existing decrees is provided by the Delaware River Basin Commission (DRBC). Questions such as the probability of the system approaching drought state based on the current FFMP plan and the severity of the 1960s drought are addressed using long record paleo‐reconstructions of flows. For this study, we developed reconstructed total annual flows (water year) for 3 reservoir inflows using regional tree rings going back upto 1754 (a total of 246 years). The reconstructed flows are used with a simple reservoir model to quantify droughts. We observe that the 1960s drought is by far the worst drought based on 246 years of simulations (since 1754).

Harmonised framework for ecological risk assessment of sediments from ports and estuarine zones of North and South Atlantic

Coordenação de Aperfeiçoamento de Pessoal de Nível Superior (CAPES)

Cancer risk assessment of ethyl carbamate in alcoholic beverages from Brazil with special consideration to the spirits cachaca and tiquira

Conselho Nacional de Desenvolvimento Científico e Tecnológico (CNPq)

Efficacy of dip slide test for mutans streptococci in caries risk assessment

The aim of this study was to evaluate the efficacy of a dip slide test for mutans streptococci in caries risk assessment, when the microbiological results were compared to well-defined clinical criteria (DCC) for caries risk, clinically measured through high and low caries activity. Eighty-one volunteers from the 6(th) to 8(th) grades from public schools of Piracicaba, São Paulo, Brazil, were evaluated for dental caries. All free smooth surfaces were evaluated to check whether or not there were white spots. Based on the subjects' caries experience, a calibrated clinician divided them into groups of high and low caries activity. The subjects were submitted to a salivary test (CARITEST SM (R)) from the same batch number. Kappa statistics (kappa) were applied to verify the reproducibility of the simplified test, checked through interexaminer agreement when the results were classified by independent and blind means. The microbiological results were validated according to expressions of sensitivity and specificity. A moderate agreement was verified as the results were classified according to 6 scores (kappa =0.55), and the agreement was substantial when the results were classified according to high and low microbiological count (kappa =0.78). The sensitivity and specificity values were 0.59 and 0.85, respectively, showing that the test was more specific than sensitive, and could thus better identify the low caries risk subjects.

Risk assessment of cadmium toxicity on hepatic and renal tissues of rats

Pollution and industrial practices result in concentrations of metals and other environmental agents that are related to environmental toxicity. A rat bioassay was utilized for the identification of toxic effects of cadmium intake. This demonstrated increased total urinary proteins and increased kidney weights in rats exposed to CdCl2, for 7 days, in drinking water (100 mg/L). Serum creatinine, total and direct bilirubin concentrations and alanine transaminase activity were increased in Cd-exposed rats, indicating renal and hepatic toxicity. It was also observed that lipoperoxide concentrations were increased, while Cu-Zn superoxide dismutase activity was decreased in rats treated with cadmium. This indicated that the renal and hepatic toxicity induced by cadmium involved superoxide radicals. (C) 1998 Academic Press.