SlideShare a Scribd company logo
1 of 31
VULNERABILITY
ASSESSMENT AND
ANALYSIS (VAA)
What is is VAA?
VAA?
What

Decision support
methodology to
help identify
and prioritize
vulnerabilities
which may
cause major
losses.
What is VAA?

Identifies key
vulnerabilities
to deliver safe
and reliability
operations
What is VAA?
Establishes a prioritized defect
list for subsequent functional
review and remediation
How does VAA work?
Based on a
Hazop style
brainstorming
approach
How does VAA work?
Involves small
groups of
engineering and
operating staff,
plus individual
interviews
How does VAA work?
Produces a
substantial
amount of
information
What’s the purpose of VAA?

To analyze, categorize, and
prioritize vulnerabilities
It takes a team
VAA uses the
perceptions, and
experience, of those
involved with
maintaining and
operating the facility
to assess and
categorize the
vulnerability of key
assets to the potential
of mal-operation or
malfunction.
And then what happens?
More detailed
information is
obtained in
subsequent
studies

FMEA
SIL

RCA

RCM
Fault
Trees
Level of
Protection
Analysis
An over-arching methodology
VAA can be
used on any
process during
any phase
An integrated approach
When
vulnerabilities
are discovered
that are not
immediately
manageable

…the action
items flow into
the appropriate
secondary
methodology
VAA is a blend

Hazop, PHA,
Maintainability, Spares,
Production Data,
Operability,
Design Review,
Availability Analysis

Understanding of
the process under
study, condition of
equipment &
consequences of
failure

Team of senior
representatives
e.g. design, project,
operating staff
Typical output
Methodology
1) Pre-Assessment
2) Facilitated Assessment & Analysis

3) Post Assessment Phase
Pre-Assessment
- Identifying the VAA objectives
- Determining measures of success

- Finalizing what elements of the
methodology will be included
- Ensuring access to information
- Developing an assessment schedule
Pre-Assessment
Objectives and
measures of
success must be
tailored to the
organization
and its needs
Possible objectives could include:
- Identify all critical vulnerabilities
- Identify and rank all key assets based on a
common “vulnerability maturity matrix”

- Develop the business case for making
vulnerability reduction investments
- Enhance awareness / make VAA an
integral part of business strategy
Facilitated Assessment and Analysis
VAA starts with the
fullest description of
the system /
process and then
questions every
part of it
Post Assessment
- Ranking vulnerabilities by risk category
- Prioritizing assessment recommendations
- Developing an action plan
- Capturing lessons learned and best
practices
- Conducting periodic assessments to report
progress
Post Assessment
Risk mitigation
activities that are
low cost or result in
cost savings
should get special
attention
Post Assessment
Other vulnerabilities
might require further
assessment using
quantitative methods
in order to identify
appropriate risk
reduction actions
Deliverables
The VAA process
delivers a
comprehensive
report documenting
the study, resulting
assessment and
identified actions
Deliverables
A typical report may include:
- Visual vulnerabilities map.
- Listing system or area
- Vulnerability by category
- Prioritized action list

- Action by type
Summary
VAA is an overarching methodology
designed to expose
and discover
vulnerabilities across
a wide segment of
possible impacts
Summary
FMEA, Risk Assessment, HAZOP Faultree and
RCM have a purpose at design stage.
Once a facility is operating traditional
analytical methods are not as effective in
identifying vulnerabilities across different
groups and changing situations.
Summary
VAA delivers broad focus incorporating
dynamics of a production facility from all
parts of the organization, picking up
informal “work-arounds”, changes to
operating practices, changes in
equipment condition, and tribal
knowledge of people involved in day to
day activities.
About ARMS Reliability
Since 1995, ARMS Reliability has been at the forefront
of proactive asset management strategies for a range
of blue chip companies throughout the world
Through a unique blend of consulting, education and
software solutions, we enable our clients to make
better decisions to improve their reliability.
www.armsreliability.com

More Related Content

What's hot

INFOSECFORCE Risk Management Framework Transition Plan
INFOSECFORCE Risk Management Framework Transition PlanINFOSECFORCE Risk Management Framework Transition Plan
INFOSECFORCE Risk Management Framework Transition PlanBill Ross
 
Reactec Analytics Platform brochure (2)
Reactec Analytics Platform brochure (2)Reactec Analytics Platform brochure (2)
Reactec Analytics Platform brochure (2)Evelyn Chapman
 
Control Charts: U Chart
Control Charts: U ChartControl Charts: U Chart
Control Charts: U ChartMatt Hansen
 
Understanding the Risk Management Framework & (ISC)2 CAP Module 1: Exam
Understanding the Risk Management Framework & (ISC)2 CAP Module 1: Exam Understanding the Risk Management Framework & (ISC)2 CAP Module 1: Exam
Understanding the Risk Management Framework & (ISC)2 CAP Module 1: Exam Donald E. Hester
 
Understanding the Risk Management Framework & (ISC)2 CAP Module 11: Monitor
Understanding the Risk Management Framework & (ISC)2 CAP Module 11: MonitorUnderstanding the Risk Management Framework & (ISC)2 CAP Module 11: Monitor
Understanding the Risk Management Framework & (ISC)2 CAP Module 11: MonitorDonald E. Hester
 
Continual Monitoring
Continual MonitoringContinual Monitoring
Continual MonitoringTripwire
 
Understanding the Risk Management Framework & (ISC)2 CAP Module 9: Assess Con...
Understanding the Risk Management Framework & (ISC)2 CAP Module 9: Assess Con...Understanding the Risk Management Framework & (ISC)2 CAP Module 9: Assess Con...
Understanding the Risk Management Framework & (ISC)2 CAP Module 9: Assess Con...Donald E. Hester
 
Control Charts: P Chart
Control Charts: P ChartControl Charts: P Chart
Control Charts: P ChartMatt Hansen
 
How to Build Your Risk Management Plan – an Effective Checklist
How to Build Your Risk Management Plan – an Effective ChecklistHow to Build Your Risk Management Plan – an Effective Checklist
How to Build Your Risk Management Plan – an Effective ChecklistTipsographic . com
 

What's hot (13)

INFOSECFORCE Risk Management Framework Transition Plan
INFOSECFORCE Risk Management Framework Transition PlanINFOSECFORCE Risk Management Framework Transition Plan
INFOSECFORCE Risk Management Framework Transition Plan
 
Capa, root cause analysis, and risk management
Capa, root cause analysis, and risk managementCapa, root cause analysis, and risk management
Capa, root cause analysis, and risk management
 
091814 Failure Mode Effect and Analysis (FMEA)
091814 Failure Mode Effect and Analysis (FMEA)091814 Failure Mode Effect and Analysis (FMEA)
091814 Failure Mode Effect and Analysis (FMEA)
 
Reactec Analytics Platform brochure (2)
Reactec Analytics Platform brochure (2)Reactec Analytics Platform brochure (2)
Reactec Analytics Platform brochure (2)
 
Control Charts: U Chart
Control Charts: U ChartControl Charts: U Chart
Control Charts: U Chart
 
Understanding the Risk Management Framework & (ISC)2 CAP Module 1: Exam
Understanding the Risk Management Framework & (ISC)2 CAP Module 1: Exam Understanding the Risk Management Framework & (ISC)2 CAP Module 1: Exam
Understanding the Risk Management Framework & (ISC)2 CAP Module 1: Exam
 
Understanding the Risk Management Framework & (ISC)2 CAP Module 11: Monitor
Understanding the Risk Management Framework & (ISC)2 CAP Module 11: MonitorUnderstanding the Risk Management Framework & (ISC)2 CAP Module 11: Monitor
Understanding the Risk Management Framework & (ISC)2 CAP Module 11: Monitor
 
Continual Monitoring
Continual MonitoringContinual Monitoring
Continual Monitoring
 
Understanding the Risk Management Framework & (ISC)2 CAP Module 9: Assess Con...
Understanding the Risk Management Framework & (ISC)2 CAP Module 9: Assess Con...Understanding the Risk Management Framework & (ISC)2 CAP Module 9: Assess Con...
Understanding the Risk Management Framework & (ISC)2 CAP Module 9: Assess Con...
 
Tool Support For Testing
Tool Support For TestingTool Support For Testing
Tool Support For Testing
 
Control Charts: P Chart
Control Charts: P ChartControl Charts: P Chart
Control Charts: P Chart
 
Use of Failure Mechanisms enhance FMEA and FMECA
Use of Failure Mechanisms enhance FMEA and FMECAUse of Failure Mechanisms enhance FMEA and FMECA
Use of Failure Mechanisms enhance FMEA and FMECA
 
How to Build Your Risk Management Plan – an Effective Checklist
How to Build Your Risk Management Plan – an Effective ChecklistHow to Build Your Risk Management Plan – an Effective Checklist
How to Build Your Risk Management Plan – an Effective Checklist
 

Similar to VAA Vulnerability Assessment and Analysis Identifies Risks

Vulnerability Assessment & Analysis (VAA) Overview
Vulnerability Assessment & Analysis (VAA) OverviewVulnerability Assessment & Analysis (VAA) Overview
Vulnerability Assessment & Analysis (VAA) OverviewSusan Rantall
 
Risk management in pharmaceutical Industry
Risk management in pharmaceutical IndustryRisk management in pharmaceutical Industry
Risk management in pharmaceutical IndustryMahesh shinde
 
HAZOP_Training_Guide.pdf
HAZOP_Training_Guide.pdfHAZOP_Training_Guide.pdf
HAZOP_Training_Guide.pdfFarahbennour
 
Failure Modes and Effects Analysis (FMEA).ppt
Failure Modes and Effects Analysis (FMEA).pptFailure Modes and Effects Analysis (FMEA).ppt
Failure Modes and Effects Analysis (FMEA).pptGURU DATTA
 
Failure mode and effects analysis
Failure mode  and effects analysisFailure mode  and effects analysis
Failure mode and effects analysisAndreea Precup
 
Preliminary Hazard Analysis
Preliminary Hazard AnalysisPreliminary Hazard Analysis
Preliminary Hazard AnalysisMANIKANDAN V
 
Crucial Steps to Cyber Resilience: A Guide to Effective VAPT
Crucial Steps to Cyber Resilience: A Guide to Effective VAPTCrucial Steps to Cyber Resilience: A Guide to Effective VAPT
Crucial Steps to Cyber Resilience: A Guide to Effective VAPTShyamMishra72
 
Process Hazard Analysis
Process Hazard AnalysisProcess Hazard Analysis
Process Hazard AnalysisNGE
 
Application of FMEA to a Sterility Testing Isolator: A Case Study
Application of FMEA to a Sterility Testing Isolator: A Case StudyApplication of FMEA to a Sterility Testing Isolator: A Case Study
Application of FMEA to a Sterility Testing Isolator: A Case StudyTim Sandle, Ph.D.
 
Failure modes effect analysis
Failure modes effect analysisFailure modes effect analysis
Failure modes effect analysismaheskumargkm
 
HAZOP (Hazard & Operability) Study.pdf
HAZOP (Hazard & Operability) Study.pdfHAZOP (Hazard & Operability) Study.pdf
HAZOP (Hazard & Operability) Study.pdfiFluidsEngineering1
 
11. faliure mode & effect analysis
11. faliure mode & effect analysis11. faliure mode & effect analysis
11. faliure mode & effect analysisHakeem-Ur- Rehman
 

Similar to VAA Vulnerability Assessment and Analysis Identifies Risks (20)

Vulnerability Assessment & Analysis (VAA) Overview
Vulnerability Assessment & Analysis (VAA) OverviewVulnerability Assessment & Analysis (VAA) Overview
Vulnerability Assessment & Analysis (VAA) Overview
 
Risk management in pharmaceutical Industry
Risk management in pharmaceutical IndustryRisk management in pharmaceutical Industry
Risk management in pharmaceutical Industry
 
HAZOP_Training_Guide.pdf
HAZOP_Training_Guide.pdfHAZOP_Training_Guide.pdf
HAZOP_Training_Guide.pdf
 
Failure Modes and Effects Analysis (FMEA).ppt
Failure Modes and Effects Analysis (FMEA).pptFailure Modes and Effects Analysis (FMEA).ppt
Failure Modes and Effects Analysis (FMEA).ppt
 
Failure mode and effects analysis
Failure mode  and effects analysisFailure mode  and effects analysis
Failure mode and effects analysis
 
Preliminary Hazard Analysis
Preliminary Hazard AnalysisPreliminary Hazard Analysis
Preliminary Hazard Analysis
 
Hazards and risk management
Hazards and risk managementHazards and risk management
Hazards and risk management
 
FMEA
FMEAFMEA
FMEA
 
Hazop_study_introduction
Hazop_study_introductionHazop_study_introduction
Hazop_study_introduction
 
Hazop analysis complete report
Hazop analysis complete reportHazop analysis complete report
Hazop analysis complete report
 
Crucial Steps to Cyber Resilience: A Guide to Effective VAPT
Crucial Steps to Cyber Resilience: A Guide to Effective VAPTCrucial Steps to Cyber Resilience: A Guide to Effective VAPT
Crucial Steps to Cyber Resilience: A Guide to Effective VAPT
 
Quality risk management
Quality risk managementQuality risk management
Quality risk management
 
Hazard analysis
Hazard analysisHazard analysis
Hazard analysis
 
Process Hazard Analysis
Process Hazard AnalysisProcess Hazard Analysis
Process Hazard Analysis
 
Application of FMEA to a Sterility Testing Isolator: A Case Study
Application of FMEA to a Sterility Testing Isolator: A Case StudyApplication of FMEA to a Sterility Testing Isolator: A Case Study
Application of FMEA to a Sterility Testing Isolator: A Case Study
 
Failure modes effect analysis
Failure modes effect analysisFailure modes effect analysis
Failure modes effect analysis
 
HAZOP (Hazard & Operability) Study.pdf
HAZOP (Hazard & Operability) Study.pdfHAZOP (Hazard & Operability) Study.pdf
HAZOP (Hazard & Operability) Study.pdf
 
Tool Support For Testing (Chapter 6)
Tool Support For Testing (Chapter 6)Tool Support For Testing (Chapter 6)
Tool Support For Testing (Chapter 6)
 
11. faliure mode & effect analysis
11. faliure mode & effect analysis11. faliure mode & effect analysis
11. faliure mode & effect analysis
 
What is HAZOP?
What is HAZOP?What is HAZOP?
What is HAZOP?
 

More from ARMS Reliability

How to Instill a Culture of Reliability - "The Big Bang"
How to Instill a Culture of Reliability - "The Big Bang"How to Instill a Culture of Reliability - "The Big Bang"
How to Instill a Culture of Reliability - "The Big Bang"ARMS Reliability
 
Jack Jager AMPEAK 2014 Presentation - 6 steps for a successful root cause ana...
Jack Jager AMPEAK 2014 Presentation - 6 steps for a successful root cause ana...Jack Jager AMPEAK 2014 Presentation - 6 steps for a successful root cause ana...
Jack Jager AMPEAK 2014 Presentation - 6 steps for a successful root cause ana...ARMS Reliability
 
Weylon Malek AMPEAK 2014 Presentation - Process Reliability
Weylon Malek AMPEAK 2014 Presentation - Process ReliabilityWeylon Malek AMPEAK 2014 Presentation - Process Reliability
Weylon Malek AMPEAK 2014 Presentation - Process ReliabilityARMS Reliability
 
Root Cause Analysis - When is a problem not a problem?
Root Cause Analysis - When is a problem not a problem?Root Cause Analysis - When is a problem not a problem?
Root Cause Analysis - When is a problem not a problem?ARMS Reliability
 
Using RCM to Justify Maintenance Strategies
Using RCM to Justify Maintenance Strategies Using RCM to Justify Maintenance Strategies
Using RCM to Justify Maintenance Strategies ARMS Reliability
 
ARMS Reliability Capability Statement
ARMS Reliability Capability StatementARMS Reliability Capability Statement
ARMS Reliability Capability StatementARMS Reliability
 
ARMS Reliability Corporate Brochure
ARMS Reliability Corporate BrochureARMS Reliability Corporate Brochure
ARMS Reliability Corporate BrochureARMS Reliability
 
Estimating Failure Parameters in Reliability Analysis
Estimating Failure Parameters in Reliability AnalysisEstimating Failure Parameters in Reliability Analysis
Estimating Failure Parameters in Reliability AnalysisARMS Reliability
 

More from ARMS Reliability (9)

How to Instill a Culture of Reliability - "The Big Bang"
How to Instill a Culture of Reliability - "The Big Bang"How to Instill a Culture of Reliability - "The Big Bang"
How to Instill a Culture of Reliability - "The Big Bang"
 
Jack Jager AMPEAK 2014 Presentation - 6 steps for a successful root cause ana...
Jack Jager AMPEAK 2014 Presentation - 6 steps for a successful root cause ana...Jack Jager AMPEAK 2014 Presentation - 6 steps for a successful root cause ana...
Jack Jager AMPEAK 2014 Presentation - 6 steps for a successful root cause ana...
 
Weylon Malek AMPEAK 2014 Presentation - Process Reliability
Weylon Malek AMPEAK 2014 Presentation - Process ReliabilityWeylon Malek AMPEAK 2014 Presentation - Process Reliability
Weylon Malek AMPEAK 2014 Presentation - Process Reliability
 
Root Cause Analysis - When is a problem not a problem?
Root Cause Analysis - When is a problem not a problem?Root Cause Analysis - When is a problem not a problem?
Root Cause Analysis - When is a problem not a problem?
 
Using RCM to Justify Maintenance Strategies
Using RCM to Justify Maintenance Strategies Using RCM to Justify Maintenance Strategies
Using RCM to Justify Maintenance Strategies
 
RAMS for new projects
RAMS for new projectsRAMS for new projects
RAMS for new projects
 
ARMS Reliability Capability Statement
ARMS Reliability Capability StatementARMS Reliability Capability Statement
ARMS Reliability Capability Statement
 
ARMS Reliability Corporate Brochure
ARMS Reliability Corporate BrochureARMS Reliability Corporate Brochure
ARMS Reliability Corporate Brochure
 
Estimating Failure Parameters in Reliability Analysis
Estimating Failure Parameters in Reliability AnalysisEstimating Failure Parameters in Reliability Analysis
Estimating Failure Parameters in Reliability Analysis
 

Recently uploaded

"Federated learning: out of reach no matter how close",Oleksandr Lapshyn
"Federated learning: out of reach no matter how close",Oleksandr Lapshyn"Federated learning: out of reach no matter how close",Oleksandr Lapshyn
"Federated learning: out of reach no matter how close",Oleksandr LapshynFwdays
 
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 3652toLead Limited
 
Streamlining Python Development: A Guide to a Modern Project Setup
Streamlining Python Development: A Guide to a Modern Project SetupStreamlining Python Development: A Guide to a Modern Project Setup
Streamlining Python Development: A Guide to a Modern Project SetupFlorian Wilhelm
 
Advanced Test Driven-Development @ php[tek] 2024
Advanced Test Driven-Development @ php[tek] 2024Advanced Test Driven-Development @ php[tek] 2024
Advanced Test Driven-Development @ php[tek] 2024Scott Keck-Warren
 
AI as an Interface for Commercial Buildings
AI as an Interface for Commercial BuildingsAI as an Interface for Commercial Buildings
AI as an Interface for Commercial BuildingsMemoori
 
Bun (KitWorks Team Study 노별마루 발표 2024.4.22)
Bun (KitWorks Team Study 노별마루 발표 2024.4.22)Bun (KitWorks Team Study 노별마루 발표 2024.4.22)
Bun (KitWorks Team Study 노별마루 발표 2024.4.22)Wonjun Hwang
 
My INSURER PTE LTD - Insurtech Innovation Award 2024
My INSURER PTE LTD - Insurtech Innovation Award 2024My INSURER PTE LTD - Insurtech Innovation Award 2024
My INSURER PTE LTD - Insurtech Innovation Award 2024The Digital Insurer
 
"Debugging python applications inside k8s environment", Andrii Soldatenko
"Debugging python applications inside k8s environment", Andrii Soldatenko"Debugging python applications inside k8s environment", Andrii Soldatenko
"Debugging python applications inside k8s environment", Andrii SoldatenkoFwdays
 
Gen AI in Business - Global Trends Report 2024.pdf
Gen AI in Business - Global Trends Report 2024.pdfGen AI in Business - Global Trends Report 2024.pdf
Gen AI in Business - Global Trends Report 2024.pdfAddepto
 
Key Features Of Token Development (1).pptx
Key  Features Of Token  Development (1).pptxKey  Features Of Token  Development (1).pptx
Key Features Of Token Development (1).pptxLBM Solutions
 
New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024
New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024
New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024BookNet Canada
 
Build your next Gen AI Breakthrough - April 2024
Build your next Gen AI Breakthrough - April 2024Build your next Gen AI Breakthrough - April 2024
Build your next Gen AI Breakthrough - April 2024Neo4j
 
Unleash Your Potential - Namagunga Girls Coding Club
Unleash Your Potential - Namagunga Girls Coding ClubUnleash Your Potential - Namagunga Girls Coding Club
Unleash Your Potential - Namagunga Girls Coding ClubKalema Edgar
 
My Hashitalk Indonesia April 2024 Presentation
My Hashitalk Indonesia April 2024 PresentationMy Hashitalk Indonesia April 2024 Presentation
My Hashitalk Indonesia April 2024 PresentationRidwan Fadjar
 
SQL Database Design For Developers at php[tek] 2024
SQL Database Design For Developers at php[tek] 2024SQL Database Design For Developers at php[tek] 2024
SQL Database Design For Developers at php[tek] 2024Scott Keck-Warren
 
Dev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio WebDev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio WebUiPathCommunity
 
Transcript: New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024Transcript: New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024BookNet Canada
 
Science&tech:THE INFORMATION AGE STS.pdf
Science&tech:THE INFORMATION AGE STS.pdfScience&tech:THE INFORMATION AGE STS.pdf
Science&tech:THE INFORMATION AGE STS.pdfjimielynbastida
 
"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr Bagan"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr BaganFwdays
 

Recently uploaded (20)

"Federated learning: out of reach no matter how close",Oleksandr Lapshyn
"Federated learning: out of reach no matter how close",Oleksandr Lapshyn"Federated learning: out of reach no matter how close",Oleksandr Lapshyn
"Federated learning: out of reach no matter how close",Oleksandr Lapshyn
 
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
Tech-Forward - Achieving Business Readiness For Copilot in Microsoft 365
 
Streamlining Python Development: A Guide to a Modern Project Setup
Streamlining Python Development: A Guide to a Modern Project SetupStreamlining Python Development: A Guide to a Modern Project Setup
Streamlining Python Development: A Guide to a Modern Project Setup
 
Advanced Test Driven-Development @ php[tek] 2024
Advanced Test Driven-Development @ php[tek] 2024Advanced Test Driven-Development @ php[tek] 2024
Advanced Test Driven-Development @ php[tek] 2024
 
AI as an Interface for Commercial Buildings
AI as an Interface for Commercial BuildingsAI as an Interface for Commercial Buildings
AI as an Interface for Commercial Buildings
 
Bun (KitWorks Team Study 노별마루 발표 2024.4.22)
Bun (KitWorks Team Study 노별마루 발표 2024.4.22)Bun (KitWorks Team Study 노별마루 발표 2024.4.22)
Bun (KitWorks Team Study 노별마루 발표 2024.4.22)
 
My INSURER PTE LTD - Insurtech Innovation Award 2024
My INSURER PTE LTD - Insurtech Innovation Award 2024My INSURER PTE LTD - Insurtech Innovation Award 2024
My INSURER PTE LTD - Insurtech Innovation Award 2024
 
"Debugging python applications inside k8s environment", Andrii Soldatenko
"Debugging python applications inside k8s environment", Andrii Soldatenko"Debugging python applications inside k8s environment", Andrii Soldatenko
"Debugging python applications inside k8s environment", Andrii Soldatenko
 
Gen AI in Business - Global Trends Report 2024.pdf
Gen AI in Business - Global Trends Report 2024.pdfGen AI in Business - Global Trends Report 2024.pdf
Gen AI in Business - Global Trends Report 2024.pdf
 
Key Features Of Token Development (1).pptx
Key  Features Of Token  Development (1).pptxKey  Features Of Token  Development (1).pptx
Key Features Of Token Development (1).pptx
 
New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024
New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024
New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024
 
E-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptx
E-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptxE-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptx
E-Vehicle_Hacking_by_Parul Sharma_null_owasp.pptx
 
Build your next Gen AI Breakthrough - April 2024
Build your next Gen AI Breakthrough - April 2024Build your next Gen AI Breakthrough - April 2024
Build your next Gen AI Breakthrough - April 2024
 
Unleash Your Potential - Namagunga Girls Coding Club
Unleash Your Potential - Namagunga Girls Coding ClubUnleash Your Potential - Namagunga Girls Coding Club
Unleash Your Potential - Namagunga Girls Coding Club
 
My Hashitalk Indonesia April 2024 Presentation
My Hashitalk Indonesia April 2024 PresentationMy Hashitalk Indonesia April 2024 Presentation
My Hashitalk Indonesia April 2024 Presentation
 
SQL Database Design For Developers at php[tek] 2024
SQL Database Design For Developers at php[tek] 2024SQL Database Design For Developers at php[tek] 2024
SQL Database Design For Developers at php[tek] 2024
 
Dev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio WebDev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio Web
 
Transcript: New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024Transcript: New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC BiblioShare - Tech Forum 2024
 
Science&tech:THE INFORMATION AGE STS.pdf
Science&tech:THE INFORMATION AGE STS.pdfScience&tech:THE INFORMATION AGE STS.pdf
Science&tech:THE INFORMATION AGE STS.pdf
 
"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr Bagan"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr Bagan
 

VAA Vulnerability Assessment and Analysis Identifies Risks

  • 2. What is is VAA? VAA? What Decision support methodology to help identify and prioritize vulnerabilities which may cause major losses.
  • 3. What is VAA? Identifies key vulnerabilities to deliver safe and reliability operations
  • 4. What is VAA? Establishes a prioritized defect list for subsequent functional review and remediation
  • 5. How does VAA work? Based on a Hazop style brainstorming approach
  • 6. How does VAA work? Involves small groups of engineering and operating staff, plus individual interviews
  • 7. How does VAA work? Produces a substantial amount of information
  • 8. What’s the purpose of VAA? To analyze, categorize, and prioritize vulnerabilities
  • 9. It takes a team VAA uses the perceptions, and experience, of those involved with maintaining and operating the facility to assess and categorize the vulnerability of key assets to the potential of mal-operation or malfunction.
  • 10. And then what happens? More detailed information is obtained in subsequent studies FMEA SIL RCA RCM Fault Trees Level of Protection Analysis
  • 11. An over-arching methodology VAA can be used on any process during any phase
  • 12. An integrated approach When vulnerabilities are discovered that are not immediately manageable …the action items flow into the appropriate secondary methodology
  • 13. VAA is a blend Hazop, PHA, Maintainability, Spares, Production Data, Operability, Design Review, Availability Analysis Understanding of the process under study, condition of equipment & consequences of failure Team of senior representatives e.g. design, project, operating staff
  • 15. Methodology 1) Pre-Assessment 2) Facilitated Assessment & Analysis 3) Post Assessment Phase
  • 16. Pre-Assessment - Identifying the VAA objectives - Determining measures of success - Finalizing what elements of the methodology will be included - Ensuring access to information - Developing an assessment schedule
  • 17. Pre-Assessment Objectives and measures of success must be tailored to the organization and its needs
  • 18. Possible objectives could include: - Identify all critical vulnerabilities - Identify and rank all key assets based on a common “vulnerability maturity matrix” - Develop the business case for making vulnerability reduction investments - Enhance awareness / make VAA an integral part of business strategy
  • 19. Facilitated Assessment and Analysis VAA starts with the fullest description of the system / process and then questions every part of it
  • 20. Post Assessment - Ranking vulnerabilities by risk category - Prioritizing assessment recommendations - Developing an action plan - Capturing lessons learned and best practices - Conducting periodic assessments to report progress
  • 21. Post Assessment Risk mitigation activities that are low cost or result in cost savings should get special attention
  • 22. Post Assessment Other vulnerabilities might require further assessment using quantitative methods in order to identify appropriate risk reduction actions
  • 23. Deliverables The VAA process delivers a comprehensive report documenting the study, resulting assessment and identified actions
  • 24. Deliverables A typical report may include: - Visual vulnerabilities map. - Listing system or area - Vulnerability by category - Prioritized action list - Action by type
  • 25.
  • 26.
  • 27.
  • 28. Summary VAA is an overarching methodology designed to expose and discover vulnerabilities across a wide segment of possible impacts
  • 29. Summary FMEA, Risk Assessment, HAZOP Faultree and RCM have a purpose at design stage. Once a facility is operating traditional analytical methods are not as effective in identifying vulnerabilities across different groups and changing situations.
  • 30. Summary VAA delivers broad focus incorporating dynamics of a production facility from all parts of the organization, picking up informal “work-arounds”, changes to operating practices, changes in equipment condition, and tribal knowledge of people involved in day to day activities.
  • 31. About ARMS Reliability Since 1995, ARMS Reliability has been at the forefront of proactive asset management strategies for a range of blue chip companies throughout the world Through a unique blend of consulting, education and software solutions, we enable our clients to make better decisions to improve their reliability. www.armsreliability.com