ABSTRACT

Assessing the resilience of Critical Infrastructure (CI) is a complex problem. Complexity becomes especially high when hybrid threats are considered and, additionally, crisis span interdependent sectors and sovereign borders, with time-variable cascading effects. Models may help address complexity, since they are simplified representations of systems, intended to promote understanding within some domain of discourse. Furthermore, Enterprise Architecture (EA) allows for managing and visualizing integrated model repositories. In this paper, we propose an EA model to assist resilience assessments, performed using a Resilience Assessment Framework (RAF). To ensure that the framework was fit for purpose according to the evaluators’ needs, a new version of an existing RAF was designed and tested, using a Design Science Research Methodology (DSRM) process model. To measure the value of the EA model, we performed a comparative evaluation of the new RAF’s usefulness—i.e. with and without assistance of the EA model. We conclude that the proposed EA model is useful for assisting resilience assessment initiatives for CI. The main scientific contributions of this paper are the validation of the EA model’s usefulness, a set of EA viewpoints for assisting resilience assessments of CI, as well as an evaluation of the new version of the RAF.