Skip to content

GCRI · 시스템 리스크 관리

정량 및 정성 방법

리스크 평가 uses numbers where data support them and structured judgement where they do not. Probabilistic models, loss distributions, 전문가 판단 도출, bow-tie diagrams and risk matrices each answer different questions and fail in different ways. This page sets out how the main methods work, when each is fit for purpose, and how combining them keeps an assessment honest about what is known and what is assumed.

01등록

Quantitative and qualitative methods on the record.

02질문

Quantitative and qualitative methods: how the risk develops.

Probability, uncertainty and judgement. The dossier below sets out how the risk develops, what is measured, where the data come from, how it is modelled and who decides.

메커니즘

Models need data that fit

Frequency and severity models work where events are numerous and recorded consistently. For rare, novel or changing risks the data are thin, and a precise-looking number can carry more assumption than evidence.

메커니즘

Judgement carries biases

Experts anchor on recent events, overestimate their own precision and converge in groups. Structured elicitation reduces these effects by separating estimates, asking for ranges and scoring calibration.

메커니즘

Matrices compress information

Likelihood and consequence matrices are quick to use, but they rank risks coarsely, can reverse orderings and hide correlated losses. They suit screening, and need other methods before a major decision.

메커니즘

Methods combine through structure

Fault trees, event trees and bow-tie diagrams link causes, controls and consequences. They provide a frame into which quantitative estimates and expert judgement can be placed and checked.

03모니터링

Cascade and stress lab.

팀이 이 주제를 따라가는 데 사용할 화면으로, 그 지표, 상태, 결정을 보여 줍니다. 이름은 예시이며 값은 설명용입니다.

Cascade and stress lab

Quantitative and qualitative methods · National system · Scenario SC-40

Cascade crosses three systemsGCRI · 시스템 리스크 관리

Interdependency graph

red: failed in scenario

Cascade sequence

  1. T+0HAZHeatwave and drought
  2. T+6hENGThermal plant derated, cooling water
  3. T+9hICTData centre on backup power
  4. T+14hWATPumping reduced, pressure loss
  5. T+20hHLTHospital water supply at risk

Service loss by system

Cascade and stress lab: the screen’s structure, terms and states for Quantitative and qualitative methods.예시 이름과 예시 값으로, 실제 기록이나 운영 중인 시스템이 아닌 설계안입니다.
04영역 전반

Methods must be fit for risks that cross domains.

05방법과 근거

How quantitative and qualitative methods is modelled, measured and tested.

모형, 그 가정, 데이터, 불확실성을 과학자나 엔지니어가 확인할 형태로 제시합니다. 구조는 발행된 방법을 따릅니다. 제시된 값은 예시이며 결과가 아닙니다.

모형, 방정식 및 가정

The model structure used for quantitative and qualitative methods, the assumptions it makes and how each is tested.

요소 i의 리스크Ri = f(Hi, Ei, Vi, Ci)재해, 노출, 취약성, 대처 역량
연간 기대 손실EAL = ∑k pk · Lk연간 확률이 pk
결합 시스템xt+1 = A xt + B ut + εtA carries the couplings, u the shock, ε the error
가정만드는 이유시험 방법
한 사건 안에서 재해와 노출은 서로 독립적임손실 적분을 다루기 쉽게 유지함결합 기록에 적합한 코퓰러와 비교
결합은 운전점 근처에서 선형이다충격이 A를 통해 전파되게 함선형 범위를 넘어 섭동을 주고 비교하십시오
취약성 곡선은 장소 간에 옮겨 쓸 수 있다지역 곡선은 거의 없다관측된 손실이 있는 곳에서는 이에 대해 검증
투입 자료
출처 정보가 있는 버전 관리 데이터세트
산출물
분포이며 결코 단일 숫자가 아님
코드
모델 카드 및 시험과 함께 공개
재현
같은 데이터, 코드, 환경과 시드
표준 리스크 및 상태공간 정식화로, 나열된 가정은 해당 방법에 일반적인 것이며 검토를 위해 명시한 것으로 결과가 아닙니다.
FAIR 지침 원칙 · GO FAIR와 FORCE11W3C PROV · 월드 와이드 웹 컨소시엄불확실성의 일관된 처리에 관한 지침 · IPCCCEOS 분석 준비 데이터(Analysis Ready Data) · 지구관측위성위원회
06지표

측정되는 것과 그 정확도.

각 지표에는 단위, 주기, 그 뒤의 출처 종류, 값에 붙을 근거 표시가 있습니다. 값은 표시하지 않습니다. 값은 프로그램이 자체 권한으로 제공합니다.

지표단위주기출처 유형라벨
Risks assessed with quantitative estimatespercent of principal risks연간Assessment records보고됨
Calibration of expert estimatescalibration score on seed questionsper elicitationStructured expert judgement records관측
Loss event recordscount of events with cause and amount recorded지속적Internal loss databases관측
Assessment uncertainty rangeratio of upper to lower bound평가별Assessment outputs추정
Controls with tested effectivenesspercent of key controls연간Control testing records보고됨
Method documentation completenesspercent of assessments with method, data and assumptions recorded연간Assessment files보고됨
07출처

근거의 출처.

이름이 명시된 공개 데이터셋과 기관 기록으로, 각각 라이선스 등급이 있습니다. 협약에 따른 출처는 그 조건에 따라서만 사용하며 결코 재게시하지 않습니다.

출처제공하는 것라이선스 등급
IEC 31010 리스크 평가 기법Descriptions, strengths and limits of more than forty techniquesLicensed standard, purchase required
EM-DAT 국제 재난 데이터베이스(CRED, 루뱅가톨릭대학교)Disaster events with human and economic impactsFree for non-commercial use with registration
센다이 프레임워크 Monitor and national disaster loss databasesPublished reporting of disaster losses against Sendai targets공개, 유엔 이용 조건
TU Delft expert judgement databasePast structured expert judgement studies with calibration dataLicence to check
Published operational loss data consortia summariesAggregate operational loss patterns in financial servicesMembers only; public summaries (to check)
08결정

누가 결정하며 근거는 무엇에 쓰이는지.

시스템 리스크 Management prepares evidence. The decisions below are taken by the authorities named, under their own rules, and never by the platform.

결정 주체질문이 페이지가 제공하는 근거
Risk functions and analystsWhich method fits a given risk and decisionMethod selection guides; documentation standards
Boards and executivesHow much confidence to place in an assessment before acting on itUncertainty ranges; method documentation; calibration records
Regulators and supervisorsWhether an institution’s risk models are fit for the use made of themModel documentation; validation and back-testing evidence

이 주제가 생산하는 산출물

  • Method selection guides keyed to the question and the evidence available
  • 구조화된 전문가 판단 도출 protocols with calibration
  • Bow-tie and fault-tree templates linked to registers
  • Assessment files that record data, assumptions and ranges
09핵심 질문

What methods experts ask.

  • Is there enough relevant data to estimate probabilities, or would numbers convey a false sense of precision?
  • What kind of uncertainty dominates: randomness, lack of knowledge, or disagreement about how the system works?
  • How sensitive is the decision to the parts of the analysis that are least certain?
  • How can expert judgement be elicited so that it is transparent and less prone to bias?
10메커니즘

Kinds of uncertainty.

Aleatory

Randomness

Natural variability that persists even with perfect knowledge, such as weather from year to year. Probability handles it well.

Epistemic

Lack of knowledge

Uncertainty that more data or research could reduce. It should be shown, not hidden in a single number.

Deep

Disputed structure

Where experts disagree on models, probabilities or values. Scenarios and robust decision methods suit it better.

11방법과 한계

A toolkit, matched to the problem.

  1. 01

    Statistical and probabilistic models

    Frequency analysis, extreme value methods and Bayesian inference from 확률과 통계. Limits: rare events are poorly sampled, and past data may not reflect a changing system.

  2. 02

    불확실성 정량화

    불확실성 정량화와 모델 검증 propagates input uncertainty through models and tests them against data. Limits: it cannot capture what the model leaves out.

  3. 03

    구조화된 전문가 판단

    Formal elicitation protocols that calibrate and combine expert views. Limits: time-consuming, and experts share blind spots.

  4. 04

    Qualitative assessment

    Scales, matrices and narrative analysis. Useful for communication and screening, but risk matrices can rank risks inconsistently and should not be the only tool.

12방법

연구되는 방식과 방법이 말할 수 없는 것.

13Where this page’s references

Where this page’s references lead.

이 페이지를 읽을 때 기준이 되는 기구와 문서. 상태와 판은 바뀌며, 각 링크는 발행 기구로 연결됩니다.

14질문

질문과 답변.

Are risk matrices reliable?
They are useful for screening and communication, but they rank risks coarsely and can mislead when risks are correlated or consequences are uncertain. Important decisions need methods that show ranges and dependencies.
What is structured expert judgement?
A formal process for eliciting estimates from experts, often with seed questions whose answers are known, so that each expert’s calibration and informativeness can be scored and estimates combined accordingly.
When should risk be quantified?
When data or models can support a number whose uncertainty can be stated, and when the decision needs it. Where they cannot, a well-documented qualitative assessment is more honest than a false number.
Are quantitative methods always better?
No. They are better when data and models are adequate. Where they are not, numbers can mislead, and structured qualitative methods or scenarios are more honest.
What is wrong with risk matrices?
They are simple and widely understood, but coarse scales can rank different risks equally, hide uncertainty and ignore dependence. They work best as a screening tool alongside other methods.
How should uncertainty be communicated?
With ranges, scenarios and plain statements of what is not known, so that decision-makers can see how much the conclusion depends on uncertain inputs.
보고서기여하기

이 페이지에서 증거를 기여하십시오.

보고서 is the Consortium’s quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.

GCRI시스템 리스크 관리시나리오 및 스트레스 테스트방법 및 기술포트폴리오와 준비도
시스템 리스크 관리

방법, 데이터세트 또는 질문을 가져오십시오.

정보와 문의는 오늘부터 열려 있습니다. 문의에는 참조 번호가 부여되고 다음 단계가 안내됩니다. 신청, 결제, 컴퓨팅 할당, 등록은 해당 팀, 약관, 심사 역량이 갖추어졌을 때만 열립니다.