RISI 2015 - 5th International Workshop on Resilience and IT-Risk in Social Infrastructures

Over the last several years, resilience has increased in importance for business network applications and for IT infrastructures. In order to prepare for expected interferences and to respond to unexpected, inevitable interferences in real-time, current initiatives in computer science aim to analyze huge amounts of data from public and private domains and to share derived information with adaptive IT systems, e.g. social networks. Realizing adequate IT services implies availability of sufficient authentic, partly personal data from different origins, their aggregation, and secondary use. These services are “data-centric” by definition. One main challenge to be solved when achieving reliable data-centric services within acceptable risks is cross-domain processing of (personal) data in compliance with law, business rules, and social norms. For instance, the European Commission proposes?with the aim of improving security and reliability?an information flow of incident reporting on data security breaches between public and private service providers, national regulatory authorities, ENISA, and the European Commission. At the same time, the European Commission promotes Privacy by Design, integrating privacy and data protection in the entire life cycle of an IT system. The review of the General Data Protection Framework will consider the possibility for extension of the obligation for incident reporting. The talks of RISI 2015, which have been selected by a double-blind review process, give an overview and introduce work in progress on trustworthiness of spontaneous information exchange between parties and their different security interests.