A fuzzy safety/cybersecurity risk analysis approach for more safe/secure industrial systems

The introduction of digital technology in process industries creates new cyber-security concerns that can affect the safety of industrial systems. Moreover, many risk experts highlight that safety and security should not be analyzed separately. In previous studies, the authors have proposed a risk analysis method that considers safety and security together during industrial risk analysis. The proposed cyber bow-tie uses a qualitative likelihood analysis methodology to define the level of risks. However, this approach may underestimate risks due to data uncertainty. For this reason, this research aims to replace the qualitative methodology by a more effective fuzzy semi-quantitative approach in order to define the level of safety/security risks under input data uncertainty. The effectiveness of the fuzzy approach is demonstrated using a real case study.