A Participative and Collaborative Approach For Security Risk Management Modelling In The Context of Essential Services

This paper introduces a participative and collaborative approach for security risk management modelling in the context of Essential Services for NIS Directive compliance. This approach allows building sectoral models using the necessary knowledge of domain experts and obtaining a better acceptability and handling of these models. The application of the methodology is related based on our experience of national modelling of several essential sectors/sub-sectors in Luxembourg. This modelling implied more than forty participatory workshops, involving more than a hundred experts to gather their knowledge. The methodology as well as the different workshops are presented in detail, and then analysed in terms of relevance, adequacy and results produced.