1st Dutch Workshop in
Information Risk Management

Location: University of Twente
Date: May 31st, 2007.

The CTIT (Centre for Telematics and Information Technology) of the University of Twente in the Netherlands is organizing a one-day workshop on Information Risk Management.

Goal of this workshop is to bring together IRM researchers and practitioners of the Netherlands to exchange ideas, present results, discuss challenges and stimulate cooperation, particularly between research institutions and the industrial world.

Topics of interest include but are not restricted to: model based risk management, business continuity, risk mitigation

The program of the workshop features invited talks from both researchers and practitioners. Attendance is free, but attendees are kindly asked to register by sending an email to Marlous Weghorst weghorst@cs.utwente.nl.

The University of Twente hosts the following projects in which IRM is a notable component:

• VRIEND http://vriend.ewi.utwente.nl
• VISPER http://visper.eemcs.utwente.nl
• IPID http://ipid.ewi.utwente.nl
• PROSECCO http://is.ewi.utwente.nl/research/completed_projects/prosecco.doc

Program and presentations

	09.30 - 10.00	Coffee
	10.00 - 10.15	Welcome
	10.15 - 11.15	Keynote talk: Erik Wisløff (Telenor) Security Risk Management in a Business Context
	11.15 - 12.00	Peter van Boxtel (Corus Information Security) Principles of risk assessment in practice
	12.00 - 13.00	Lunch and Coffee
	13.00 - 14.00	Keynote talk: Eric Verheul (PWC and Radboud Universiteit Nijmegen) User requirements on Risk Management
	14.00 - 14.30	Yudistira Dwi Wardhana Asnar (University of Trento) Analyzing Risks in Organizations through Goal-Oriented Approach
	14.30 - 15.00	Siv Hilde-Houmb (University of Twente) Decision Support for Cost-Effective Choice of Security Solutions: The AORDD Security Solution Trade-Off Analysis
	15.00 - 15.40	Wim H Sonnemans (Philips) Managing IT risks like business risks
	15.40 - 16.00	Coffee break
	16.00 - 16.30	Emmanuele Zambon, Sandro Etalle (University of Twente) Models for IT risk mitigation and BCP: towards dynamic Risk Management
	16.30 - 17.30	Panel Debate - Moderator: Pascal Van Eck