A Comparative Assessment of Network Solution Methodologies for the Comprehensive Core Capability Risk Assessment Framework

Given an enterprise-level risk model consisting of a weighted, directed, cyclic network, we describe an experimental approach to examining the suitability of four network solution methods for estimating the effect of risk propagating across the network. We also explore the effect of network aggregation under a variety of conditions to better understand and characterize the risks of an aggregated network when calibrating results with a more granular parent network is either impractical or infeasible.