A Group Decision Support Technique for Critical IT Infrastructures

The paper presents a formal semantics of decision-making based on Dempster-Shafer belief structures. We introduced a method of decision support taking into account the subjective expert information formalized in the form of family of estimations based on the combination of hypotheses and ordered weighted average operators. The task is formulated in terms of the belief structures and allows evaluating the minimum and maximum objectives through different types of aggregation operators. In the context of critical infrastructure management, our research shows that the matrix of possible solutions can be represented as a payoff matrix including performance indicators or in the form of a risk matrix corresponding losses on the specific combinations of decisions. To ensure variation in the goals we use different types of ordering alternatives depending on the type of the specific problem. Finally, an illustrative example was given to selecting strategies and prioritizing decisions to mitigate targeted cyber intrusions fit to effective IT-security risk management in different critical application.