Risikoanalyse av samfunnskritiske IKT-systemer - teknologiske erfaringer

“Protection of the society 5” (BAS5) is a research project focusing on methodologies for critical information infrastructure protection. The project has included four case studies on risk analysis of IT systems in four different critical societal sectors. The case studies have provided the project with experiences both from a methodological and a technological point of view. This report describes the latter by going through the steps normally included in a risk analysis, and for each step examining the challenges involved. Two short appendices are included, one on logical intentional threats against IT-systems and one giving an overview of the architectures and technologies currently in use.