Risk management system and method

Abstract

To enable appropriate risk management considering a configuration to be managed.SOLUTION: Risk element information indicating risk elements is acquired. An asset which is likely to be a fault due to a risk element indicated in the risk element information, and a fault probability that the asset becomes the fault are specified on the basis of static configuration information. A risk model in which the asset likely to be the fault and the fault probability are associated is generated in advance. On receipt of designated input of an evaluation target, one or more assets to be evaluated is specified as an evaluation target asset, on the basis of the designated input. A risk model related to the evaluation target asset is specified. A risk evaluation value being an index indicating a risk of the evaluation target asset is calculated on the basis of the fault probability of the evaluation target asset and the static configuration information. The risk evaluation value of the evaluation target asset is associated with the asset of the risk model.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present disclosure relates to information processing technology for risk management. [Background technology]

[0002] In recent years, risk factors such as disasters, equipment failures, cyber attacks, physical attacks, etc. are increasing in risk management of plants, etc. In addition, plants, etc. to be managed are becoming larger and more complex, and the collection of information from the assets that make up the plants and the judgment of responses based on the collected information are also becoming more complex.

[0003] Patent Document 1 discloses a technology related to risk management. Patent Document 1 discloses mapping of risk by taking into consideration the impact of natural disasters on each region that depend on the geographical location. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Special Publication No. 2017-531248 Summary of the Invention [Problem to be solved by the invention]

[0005] The technology of Patent Document 1 calculates the risk of natural disasters in various locations, and is therefore not suitable for managing the overall risk of a managed object in an integrated manner while being aware of each individual asset, when the managed object is a plant or the like that contains various assets.

[0006] One object of the present disclosure is to provide a technique that enables appropriate risk management taking into account the configuration of the managed object. [Means for solving the problem]

[0007] A risk management system according to one aspect of the present disclosure is a risk management system for managing the risk of failure occurring in a managed system including multiple assets located at respective locations and interconnected, and includes a risk modeling unit that stores static configuration information of each asset included in the managed system, acquires risk element information indicating risk elements that are factors that cause failures, identifies assets that may become failures due to the risk elements indicated in the risk element information and a failure probability that is the probability that the asset will become failure based on the static configuration information, and pre-generates a risk model that associates the assets that may become failures with the failure probability, and a risk mapping unit that accepts a designated input to be evaluated, identifies one or more assets to be evaluated as evaluation target assets based on the designated input, identifies a risk model related to the evaluation target asset, calculates a risk assessment value that is an index representing the risk of the evaluation target asset based on the failure probability of the evaluation target asset and the static configuration information, and associates the risk assessment value of the evaluation target asset with the asset in the risk model. Effect of the Invention

[0008] According to one aspect of the present disclosure, appropriate risk management is possible taking into account the configuration of the managed object. [Brief description of the drawings]

[0009] [Figure 1] FIG. 1 is a block diagram showing a configuration of a risk management system. [Diagram 2] FIG. 2 is a diagram for explaining information related to the managed objects of the risk management system. [Diagram 3] FIG. 13 illustrates an example of a table of static configuration information. [Figure 4] FIG. 13 is a diagram illustrating an example of a task list management table. [Diagram 5] FIG. 13 is a diagram illustrating an example of a work procedure management table. [Figure 6] 1 is a flowchart of a risk modeling process. [Figure 7]FIG. 13 is a diagram illustrating an example of a table of related risk information. [Figure 8] FIG. 13 is a diagram showing an example table of a geographical topographical risk model. [Figure 9] FIG. 13 is a diagram illustrating an example of a table of a connection relationship risk model. [Figure 10] FIG. 13 is a diagram showing an example of a table of an asset internal risk model. [Figure 11] 13 is a flowchart of a risk mapping process. [Figure 12] FIG. 4 is a diagram showing an example of a display screen. [Figure 13] FIG. 4 is a diagram showing an example of a display screen. [Figure 14] FIG. 4 is a diagram showing an example of a display screen. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

[0011] Fig. 1 is a block diagram showing the configuration of a risk management system, and Fig. 2 is a diagram for explaining information related to objects managed by the risk management system.

[0012] In this embodiment, a risk management system 20 is exemplified for managing the risk of various faults in an electric power system 13 as exemplified in the lower part of Fig. 2 as a managed object. Here, the various facilities constituting the electric power system 13 are referred to as assets 14. A fault refers to a state in which the normal operation of an asset is hindered. Note that the managed object is not particularly limited, but the managed object of the risk management system 20 is not limited to the electric power system 13. A system in which various facilities are arranged over a wide area and are physically or logically connected to each other is preferable.

[0013] 1, the risk management system 20 has a risk modeling unit 21, a risk mapping unit 22, a display unit 23, a simulation execution unit 24, and a risk mapping generation unit 25. The risk management system 20 is configured by a computer that executes a software program using a processor, and the risk modeling unit 21, the risk mapping unit 22, the display unit 23, the simulation execution unit 24, and the risk mapping generation unit 25 of the risk management system 20 are realized by the processor executing the software program.

[0014] The risk modeling unit 21 calculates assets 14 that may become a failure and the probability that the assets 14 will become a failure by risk simulation based on static configuration information 31 of the power system 13 obtained from an asset management system 45 that manages the power system 13, and generates and records in advance risk model information 33 that risk models failures that may occur in the assets 14 included in the power system 13. At that time, the risk modeling unit 21 causes the simulation execution unit 24, described later, to execute a simulation of risk elements that are assumed risk factors given by the risk manager 91, and obtains the simulation results from the simulation execution unit 24.

[0015] There are various types of simulations depending on the risk factors, such as flood simulation, wind simulation, power demand simulation, failure simulation, etc. The simulation is executed using necessary information from the static configuration information 31 depending on the type of simulation.

[0016] 3 is a diagram showing an example of a table of static configuration information. The static configuration information 31 includes asset information 15, configuration information 12, and geographical topographical information 11.

[0017] For example, since flood simulation and wind simulation are related to geography and topography, geographical topographical information 11 is used, in which geographical information and topographical information of the area in which the assets 14 of the power system 13 are located are recorded. The geographical topographical information 11 records geographical information and topographical information of the area in which the assets 14 of the power system 13 are located. In the example of FIG. 3, a table of the geographical topographical information 11 records information about each unit block obtained by dividing the area in which the assets 14 of the power system 13 are located into a predetermined size. More specifically, in the example of FIG. 3, a block identifier (landscape ID), a coordinate range, and attributes of each unit block are recorded.

[0018] Since the power demand simulation is related to connections between assets, configuration information 12 is used in which information about each connection between assets in the power system 13 is recorded. Information about each connection between assets in the power system 13 is recorded in the configuration information 12. In the example of Fig. 3, the table of the configuration information 12 records the connection identifier (connection ID), connection source asset identifier (connection source asset ID), and connection destination asset identifier (connection destination asset ID) of each connection.

[0019] Since the fault simulation is related to the configuration and internal state of the asset 14 itself, asset information 15 is used in which each asset 14 of the power system 13 is registered and various information about each asset 14 is recorded. In the asset information 15, each asset 14 of the power system 13 is registered and various information about each asset 14 is recorded. In the example of FIG. 3, the asset identifier (asset ID), type, attributes, number of components, and identifiers of each component (identifier and type of component) are recorded in a table of the asset information 15. Furthermore, the location and internal state of the asset 14 may be recorded in the asset information 15.

[0020] The risk mapping unit 22 identifies a risk model related to an asset 14 designated as an evaluation target by a user such as a decision maker 94, a service manager 95, or a facility manager 96 from among the risk model information 33, and calculates a risk evaluation value based on the static configuration information 31 and the failure probability of the evaluation target asset. The evaluation target asset may be determined according to the procedure of the work performed by the user who inputs the designation.

[0021] Fig. 4 is a diagram illustrating an example of a work list management table, and Fig. 5 is a diagram illustrating an example of a work procedure management table.

[0022] The work list management table 51 shows a list of work that a user performs on an asset 14. In the example of FIG. 4, a work identifier (Work ID), a work procedure identifier (Work process ID), a work name (Work name), and a standard operation cost (Standard operation cost) are defined for each work. The work procedure management table 52 shows the procedure of work that a user performs on an asset 14. In the example of FIG. 5, a procedure identifier (Process ID), a component identifier (Component ID) of the component to be worked on, a work parameter (Parameter), and an operation cost (Operation cost) are recorded in association with each other for each procedure.

[0023] The risk mapping unit 22 refers to the work list management table 51 to identify the work related to the user, and then refers to the identified work procedure management table 52 to determine the asset that is the subject of the work in the work procedure as the asset to be evaluated.

[0024] Furthermore, the risk mapping unit 22 may correct the failure probability of the asset to be evaluated based on dynamic monitoring information 32 including equipment operation information of each asset 14 measured by an equipment monitoring device 41, maintenance and maintenance information recording maintenance performed on equipment managed by a maintenance and maintenance work system 42, and weather information collected by a weather monitor 43, and calculate a risk assessment value of the asset to be evaluated based on the corrected failure probability and the static configuration information 31. The calculated risk assessment value is associated with the asset 14 in the risk model, and presented as risk information via the display unit 23 to the decision maker 94, the service manager 95, the equipment manager 96, etc.

[0025] The display unit 23 displays a screen in which image objects corresponding to assets 14 including the asset to be evaluated are displayed in a color or shape according to the risk evaluation value of the asset 14 based on a risk model with which the risk evaluation value is associated.

[0026] The simulation execution unit 24 executes a risk simulation in response to an instruction from the risk modeling unit 21, and returns the result to the risk modeling unit 21. The simulation execution unit 24 is capable of executing a flood simulation, a wind simulation, a power demand simulation, a failure simulation, and the like.

[0027] In the flood simulation, the probability of flooding due to river flooding caused by rainfall in the area where the assets 14 are located is calculated based on meteorological information assumed to be a typhoon, for example, and the geographical topographical information 11 conceptually illustrated in the upper part of FIG. 2. The geographical topographical information 11 includes geographical and topographical information of the area where the assets 14 of the power system 13 are located. River flooding is simulated from the geographical and topographical information. In the wind simulation, the strength and direction of wind at each location where the assets 14 are located are calculated based on meteorological information assumed to be a typhoon, for example, and the geographical topographical information 11. In that case, when calculating the risk of a power outage due to a typhoon, for example, the risk modeling unit 21 may integrate the results of the flood simulation and the wind simulation to calculate the probability that the assets 14 in each location will become a hindrance.

[0028] Furthermore, the power demand simulation statistically predicts the time fluctuation of power demand in the power system 13. In this case, for example, the risk modeling unit 21 may calculate the probability of occurrence of a fault such as a voltage deviation or a power outage based on the result of the power demand simulation. The failure simulation predicts failure due to aging or the like of each asset 14 included in the power system 13. In this case, for example, the risk modeling unit 21 may calculate the probability that an asset 14 will become a fault due to failure based on the result of the failure simulation.

[0029] Based on the static configuration information 31, the risk mapping generation unit 25 places each asset 14 of the power system 13 registered in the asset information on a map based on the geographical topographical information 11, and generates a risk map that associates the placement of each asset 14 and the connections between the assets 14 shown in the configuration information 12 conceptually illustrated in the middle part of Fig. 2. The risk map is presented to and used by a risk manager 92 and a business manager 93.

[0030] FIG. 6 is a flow chart of the risk modeling process.

[0031] First, in step 101, the risk manager 91 or the like manually prepares a risk scenario. A risk scenario is a scenario of an anticipated failure in the power system 13. Possible risk scenarios include, for example, a power outage caused by a typhoon, a power outage caused by a cyber attack, and a power outage caused by equipment failure. From the risk scenario, it is possible to anticipate failures of assets 14 that may occur in the power system 13. In step 102, the risk manager 91 or the like manually lists risk elements from the risk scenario. The risk elements include a situation defined in the risk scenario and a target asset or a target area in which the situation occurs. For example, a typhoon in a certain geographical area, a cyber attack on an asset, equipment failure of an asset, etc. are possible.

[0032] In step 103, the risk modeling unit 21 selects and sets one of the listed risk elements.

[0033] In step 104, the risk modeling unit 21 sets a risk assessment target range from the set risk elements. The risk assessment target range represents the range of assets to be risk assessed. The risk assessment target range may specify the assets to be assessed, or may specify the area to be assessed. When an area to be assessed is set, the assets 14 located in that area become the assets to be assessed.

[0034] In step 105, the risk modeling unit 21 executes a risk simulation corresponding to the risk elements based on the static configuration information 31, and calculates assets that may become failures and the probability of such failures (failure probability). For example, if there is a typhoon in an area with a risk element, a flood simulation for that area and a simulation of the wind strength and direction for that area are performed. As described above, the risk modeling unit 21 causes the simulation execution unit 24 to execute the risk simulation and obtains the results.

[0035] In step 106, the risk modeling unit 21 determines whether the set risk element is related to the geographical topography. The determination may be made based on predefined related risk information. The related risk information is information that associates the type of risk model with the type of risk element for each asset.

[0036] Fig. 7 is a diagram showing an example of a table of related risk information. In the table of related risk information 53 in Fig. 7, a risk element identifier (Risk ID), a risk model type (Risk model type), a risk element type (Disaster type), a recovery procedure (Recovery procedure), and a standard operation cost (Standard operation cost for recovery) are recorded in association with each other for each risk element of a certain asset 14. The risk model types include geographical topography (Geographic), connectivity (Geographic), and asset internal state (Asset internal). The risk element types include flood, lightning, cyber attack, part wear, etc.

[0037] For example, if the risk element is related to flooding, the risk element is related to geographical topography, as shown in the first row of the related risk information 53 in Fig. 7. If the risk element is related to geographical topography (Yes in step 106), in step 107, the risk modeling unit 21 generates a geographical topography risk model by associating assets that may be impaired by the risk element and their impairment probabilities with the locations of the assets in the geographical topography information.

[0038] Fig. 8 is a diagram showing an example of a table of a geographical topography risk model. In the geographical topography risk model 54, the area in which the assets 14 are located is divided into unit sections using meshes of a predetermined size, and the failure probability for risk elements in each unit section is defined. In the example of Fig. 8, for each unit section, its section identifier (Location ID), longitude (Longitude), latitude (Latitude), failure probability (Probability), and risk element (Risk) are recorded.

[0039] If the answer is No in step 106 or after step 107, in step 108, the risk modeling unit 21 determines whether the set risk element is related to the connection between assets. For example, if the risk element is a cyber attack on an asset, the risk element is related to the connection between assets via a communication line. If the risk element is related to the connection between assets (Yes in step 108), in step 109, the risk modeling unit 21 generates a connection relationship risk model by associating the failure probability of an asset that may be damaged by the risk element with the asset in the configuration information.

[0040] FIG. 9 is a diagram showing an example of a table for a connection relationship risk model. In the connection relationship risk model 55, a failure probability for a risk element is defined for an asset connected to another asset. In the example of FIG. 9, a connection identifier (Relation ID) indicating a connection between assets, an asset identifier (Asset ID) of the target asset, an asset identifier (Related asset ID) of the connected asset, a connection type (Relation), a connection method (Method), and a failure probability (Probability) are defined. b The ability and risk factors are recorded in correspondence with each other.

[0041] If the answer is No in step 108 or after step 109, in step 110, the risk modeling unit 21 determines whether the set risk element is related to the internal state of the asset. For example, if the risk element is an equipment failure of an asset, the risk element is related to the internal information of the asset. If the risk element is related to the internal state of the asset (Yes in step 110), in step 111, the risk modeling unit 21 generates an asset internal risk model by associating the failure probability of an asset that may be damaged by the risk element with the asset.

[0042] Fig. 10 is a diagram showing an example of a table of an asset internal risk model. The asset internal risk model 56 is a table that defines the failure probability of failures and the like caused by the operating state inside the asset, such as the deterioration of parts inside the asset. In the asset internal risk model 56, the failure probability of the asset 14 as the asset itself is defined. In the example of Fig. 10, an asset internal failure identifier (Asett ID), an asset identifier (Asett ID), a component identifier (Component ID), a relationship (Relation), a failure probability (Probability), and a risk element (Risk) are recorded in correspondence with each other.

[0043] If the answer is No in step 110 or after step 111, in step 112, the risk modeling unit 21 determines whether or not all risk elements have been processed. If not all risk elements have been processed (No in step 112), the risk modeling unit 21 returns to step 103 to select an unprocessed risk element and repeats the process. If all risk elements have been processed (Yes in step 112), the risk modeling unit 21 ends the risk modeling process.

[0044] Various risk models generated by the risk modeling process are recorded as risk model information 33.

[0045] FIG. 11 is a flowchart of the risk mapping process.

[0046] In step 201, the risk mapping unit 22 determines the assets to be evaluated. The user may specify the range of assets to be evaluated from the UI, or the user may be identified from login information and the assets to be evaluated may be identified from the user's job responsibilities.

[0047] In step 202, the risk mapping unit 22 acquires information about the user's work content (procedure) for the asset.

[0048] In step 203, the risk mapping unit 22 acquires risk models related to the asset to be evaluated acquired in step 201 and the business content acquired in step 202 from among the risk models recorded as the risk model information 33. At this time, a geographical topographical risk model, a connection relationship risk model, and an asset internal risk model related to the asset to be evaluated are acquired. Also, depending on the business content of the user, only some of the risk models may be acquired.

[0049] In step 204, the risk mapping unit 22 acquires information related to the asset to be evaluated from the dynamic monitoring information 32. Various types of dynamic monitoring information, such as sensor information, weather information, access logs, and cybersecurity information related to the asset to be evaluated, are acquired.

[0050] In step 205, the risk mapping unit 22 reconstructs the risk model acquired in step 203 according to the current situation based on the monitoring information acquired in step 204. The fault probability is recalculated according to the current situation of the power system 13 and the assets 14. The recalculation method is not particularly limited, but for example, a plurality of different simulation conditions may be set, a simulation is executed under each simulation condition, a simulation condition whose simulation result is closest to the monitoring information acquired in step 204 is selected, and the risk model may be updated according to the simulation condition. Also, a model value of the risk model may be created from the monitoring information, and the risk model may be updated so as to obtain the model value.

[0051] In step 206, the risk mapping unit 22 calculates a risk assessment value of the risk element that is a cause of a failure of the asset to be evaluated. The risk element of the asset to be evaluated can be identified from the risk model acquired in step 203. The risk assessment value is calculated from the failure probability, the severity index, and the recovery cost.

[0052] When the risk factor is related to geographical topography, the risk assessment value is calculated, for example, using formula (1).

[0053] Risk evaluation value risk_eval(x,y,asset_id,risk_type) = ∫probability(t,x, y, risk_type)*criticality(asset_id,x,y,risk_type)*recovery_cost(asset_id,x,y,risk_type)dt …(1)

[0054] The risk_eval is the product of the probability, criticality, and recovery_cost for a specific period.

[0055] Probability is a function that determines and returns the probability of failure based on location (x, y), time (t), and risk type (risk_type) (flooding, lightning, etc.). Criticality is a function that returns the value of a severity index that determines whether or not there is an alternative measure in the event that the asset being evaluated fails, based on the asset identifier (asset_id), location (x, y), and risk type (risk_type). Alternative measures include spare equipment and redundancy. Recovery_cost is a function that determines and returns the value of the recovery cost, which is the cost required to recover the asset being evaluated when it fails due to the risk element, based on the asset identifier (asset_id), location (x, y), and risk type (risk_type). Recovery cost is the labor required for recovery work, the equipment cost required to replace the asset, etc. These functions are preset.

[0056] When a risk element is related to a connection configuration and when a risk element is related to an internal state of an asset, the risk evaluation value is calculated, for example, by equation (2).

[0057] Risk evaluation value risk_eval(asset_id,risk_type) = ∫probability(t,asset_id,risk_type)*criticality(asset_id,risk_type)*recovery_cost(asset_id,risk_type)dt …(2)

[0058] Like equation (1), risk_eval in equation (2) is the product of probability, criticality, and recovery_cost integrated for a specific period.

[0059] In formula (2), probability is a function that determines and returns the value of the failure probability from time (t), asset identifier (asset_id), and risk type (risk_type). Criticality is a function that returns the value of the severity index that determines whether or not there is an alternative measure in the event that the asset being evaluated fails, according to the asset identifier (asset_id) and risk type (risk_type). recovery_cost is a function that determines and returns the value of the recovery cost, which is the cost required to recover the asset being evaluated when it fails due to the risk element, according to the asset identifier (asset_id) and risk type (risk_type). These functions are preset.

[0060] In step 207, the risk mapping unit 22 integrates the risk assessment values ​​calculated in step 206. For example, the risk assessment values ​​calculated in step 206 may be simply summed up, or may be weighted according to the risk elements and summed up.

[0061] In step 208, the risk mapping unit 22 displays the risk assessment value and / or the risk model on a screen via the display unit 23. The display unit 23 can display the risk assessment value and / or the risk model in a graphical format from various perspectives, as desired by the user.

[0062] 12, 13 and 14 are diagrams showing examples of display screens.

[0063] When a service management staff member selects a menu for evaluating the risk of power outage in a particular area, the risk evaluation value of the assets in that area is displayed, as shown in Fig. 12. In the example of Fig. 12, a window screen 61 displays image objects 62 that correspond to each risk element and display its risk evaluation value, with a size according to the integrated risk evaluation value.

[0064] When the user further selects and clicks one image object 62a from the window screen 61 of Fig. 12, a window screen 63 of Fig. 13 is displayed. A geographical topographical risk model 64, a connectivity relationship risk model 65, and an asset internal risk model 66 for the selected risk element are displayed on the window screen 63 of Fig. 13.

[0065] When the user further selects and clicks on the geographical topographical risk model 64 from the window screen 63 of Fig. 13, a window screen 67 of Fig. 14 is displayed. The window screen 67 displays the geographical topographical risk model 64 and a flood simulation result screen 68 and a wind simulation result screen 69 associated therewith. The risk assessment value of each location in the geographical topographical risk model 64 is calculated by integrating the results of the flood simulation and the wind simulation. The user can check the results of the flood simulation and the wind simulation on the window screen 67 of Fig. 14.

[0066] The above-described embodiment includes the following items. However, the items included in the embodiment are not limited to the items listed below.

[0067] (Item 1) 1. A risk management system for managing a risk of failure occurring in a managed system including a plurality of interconnected assets located at respective locations, the risk management system comprising: a risk modeling unit that stores static configuration information of each asset included in the managed system, acquires risk element information indicating risk elements that are factors that cause failures, identifies assets that may become failures due to the risk elements indicated in the risk element information and a failure probability that is the probability that the asset will become failure based on the static configuration information, and generates in advance a risk model that associates the assets that may become failures with the failure probability; a risk mapping unit that receives a designation input of an evaluation target, identifies one or more assets to be evaluated as evaluation target assets based on the designation input, identifies a risk model related to the evaluation target asset, calculates a risk assessment value that is an index representing the risk of the evaluation target asset based on the failure probability of the evaluation target asset and the static configuration information, and associates the risk assessment value of the evaluation target asset with the corresponding asset in the risk model; has. This allows a risk model to be generated in advance based on static configuration information, a risk model associated with the specified asset to be evaluated is identified, and a risk assessment value based on the probability of failure is associated with the risk model, thereby enabling appropriate risk management that takes into account the configuration of the managed system.

[0068] (Item 2) 1. The risk management system according to claim 1, The risk mapping unit acquires dynamic monitoring information regarding the asset to be evaluated, recalculates the failure probability of the asset to be evaluated based on the monitoring information, and calculates a risk assessment value, which is an index representing the risk of the asset to be evaluated, based on the corrected failure probability of the asset to be evaluated and the static configuration information. This allows the risk assessment value to be calculated based on the failure probability recalculated based on dynamic monitoring information, thereby achieving good risk management that reflects dynamic information regarding assets.

[0069] (Item 3) 1. The risk management system according to claim 1, The static configuration information includes asset information including the location and internal state of each asset included in the managed system, configuration information including connections between the assets, and geographical and topographical information that is geographical and topographical information of the area in which the assets of the managed system are located; The risk modeling unit includes: generating a geographical risk model by associating assets that may be impaired by the risk factors and their impairment probabilities with locations of the assets in the geographical information if the risk factors are related to geographical topography; When the risk element is related to a connection between assets, a connection relationship risk model is generated by associating a failure probability of an asset that may be damaged by the risk element with the asset in the configuration information; If the risk element is related to an internal state of an asset, an asset internal risk model is generated by associating the failure probability of the potential asset with the asset. This makes it possible to appropriately manage the risks of a managed system that includes multiple assets located at different locations and interconnected with each other by using a risk model suitable for risks related to geographical topography, a risk model suitable for risks related to connections between assets, and a risk model suitable for risks related to the internal states of the assets.

[0070] (Item 4) In the risk management system according to item 3, The risk mapping unit calculates a risk assessment value, which is an index representing the risk of the asset to be evaluated, based on the failure probability of the asset to be evaluated, a severity index, which is an index regarding whether or not there is an alternative means for the asset, and a recovery cost, which is the cost required to recover the asset when it fails. This enables appropriate risk management based on a risk assessment value that takes into account not only the probability of a failure occurring, but also the availability of alternative means and the cost required to recover from the failure.

[0071] (Item 5) In the risk management system according to item 4, The risk assessment value of the asset is a product of the failure probability, the severity index, and the restoration cost of the asset.

[0072] (Item 6) In the risk management system according to item 2, The monitoring information includes one or more of equipment operation information indicating the operating status of the asset being evaluated, weather information for the area related to the asset being evaluated, and maintenance information indicating the status of maintenance and preservation being carried out on the asset.

[0073] (Item 7) In the risk management system according to item 3, the managed system is a power system; The risk factors include typhoons, cyber attacks, and equipment failures. In the case of the typhoon, the risk factor is related to geography; In the case of a cyber attack, the risk factor is related to the connection, In the case of equipment failure, the risk element is related to the internal state.

[0074] (Item 8) 1. The risk management system according to claim 1, The device further includes a display unit that displays a screen in which node image objects corresponding to assets are connected by link image objects corresponding to connections between assets based on a risk model to which the risk assessment value is associated, and the node image objects are displayed in a color and / or shape based on the risk assessment value.

[0075] (Item 9) 1. The risk management system according to claim 1, The device further includes a display unit that displays a screen in which node image objects corresponding to assets are connected by link image objects corresponding to connections between assets based on a risk model to which the risk assessment value is associated, and the node image objects are displayed in a color and / or shape based on the risk assessment value.

[0076] The above-described embodiments of the present invention are merely examples for explaining the present invention, and are not intended to limit the scope of the present invention to these embodiments. Those skilled in the art can implement the present invention in various other forms without departing from the scope of the present invention. [Explanation of symbols]

[0077] 11...geographical topographical information, 12...configuration information, 13...power system, 14...asset, 15...asset information, 20...risk management system, 21...risk modeling unit, 22...risk mapping unit, 23...display unit, 24...simulation execution unit, 25...risk mapping generation unit, 31...static configuration information, 32...dynamic monitoring information, 33...risk model information, 41...equipment monitoring device, 42...maintenance and preservation work system, 43...weather monitor, 45...asset management system, 51...work list management table, 52...work procedure management table, 53...related list risk model, 54...geographical topography risk model, 55...connectivity risk model, 56...asset internal risk model, 61...window screen, 62a...image object, 62...image object, 63...window screen, 64...geographical topography risk model, 65...connectivity risk model, 66...asset internal risk model, 67...window screen, 68...flood simulation result screen, 69...wind simulation result screen, 91...risk manager, 92...risk manager, 93...business manager, 94...decision maker, 95...service manager, 96...facility manager

Claims

1. A risk management system for managing a risk of failure occurring in a managed system including a plurality of interconnected assets located at respective locations, the risk management system comprising: a risk modeling unit that stores static configuration information including the location, internal state, connections between assets, and geographical topography of each asset included in the managed system, acquires risk element information indicating risk elements that may cause a failure and are related to the internal state of an asset, the connections between assets, or the geographical topography of the area in which the asset is located, identifies assets that may become a failure due to risk elements indicated in the risk element information and a failure probability that is the probability that the asset will become a failure by a simulation based on the static configuration information, and if the risk element is related to geographical topography, generates a geographical topography risk model by associating the asset that may become a failure due to the risk element and the failure probability with the location of the asset in the static configuration information, if the risk element is related to the connection between assets, generates a connection relationship risk model by associating the failure probability of the asset that may become a failure due to the risk element with the asset in the configuration information, and if the risk element is related to the internal state of an asset, generates an asset internal risk model by associating the failure probability of the asset that may become a failure due to the risk element with the asset in the configuration information; a risk mapping unit that receives a designation input of an evaluation target, identifies one or more assets to be evaluated as evaluation target assets based on the designation input, identifies a risk model related to the evaluation target asset from among the geographical topographical risk model, the connection relationship risk model, and the asset internal risk model, calculates a risk assessment value that is an index representing the risk of the evaluation target asset based on the failure probability of the evaluation target asset and the static configuration information using the identified risk model, and associates the risk assessment value of the evaluation target asset with the asset in the risk model; A risk management system with

2. The risk mapping unit acquires dynamic monitoring information regarding the asset to be evaluated, recalculates a failure probability of the asset to be evaluated based on the monitoring information, and calculates a risk assessment value, which is an index representing a risk of the asset to be evaluated, based on the corrected failure probability of the asset to be evaluated and the static configuration information. The risk management system of claim 1.

3. The risk mapping unit calculates a risk assessment value, which is an index representing a risk of the asset to be evaluated, based on a failure probability of the asset to be evaluated, a severity index, which is an index relating to the presence or absence of an alternative means for the asset, and a recovery cost, which is a cost required for recovery when the asset is damaged. The risk management system of claim 1.

4. The risk assessment value of the asset is a value obtained by multiplying the failure probability of the asset, the severity index, and the recovery cost. The risk management system according to claim 3.

5. The monitoring information includes one or more of equipment operation information indicating the operating status of the asset to be evaluated, weather information of a region related to the asset to be evaluated, and maintenance and maintenance information indicating the implementation status of maintenance and maintenance for the asset. The risk management system according to claim 2.

6. the managed system is a power system; The risk factors include typhoons, cyber attacks, and equipment failures. In the case of the typhoon, the risk factor is related to geography; In the case of a cyber attack, the risk factor is related to the connection, In the event of a device failure, the risk factor is related to an internal state; The risk management system of claim 1.

7. a display unit that displays a screen in which node image objects corresponding to assets are connected by link image objects corresponding to connections between assets based on a risk model to which the risk assessment value is associated, and the node image objects are displayed in a color and / or shape based on the risk assessment value; The risk management system of claim 1.

8. a display unit that displays a screen in which node image objects corresponding to assets are connected by link image objects corresponding to connections between assets based on a risk model to which the risk assessment value is associated, and the node image objects are displayed in a color and / or shape based on the risk assessment value; The risk management system of claim 1.

9. 1. A risk management method for managing a risk of failure occurring in a managed system including a plurality of interconnected assets located at respective locations, the method comprising: The computer storing static configuration information including the location, internal state, connections between assets, and geographical topography of the area in which the assets are located of each asset included in the managed system; acquiring risk element information indicating risk elements that may cause a failure and that are related to the internal state of the assets, the connections between assets, or the geographical topography of the area in which the assets are located; identifying assets that may become faulty due to the risk elements indicated in the risk element information and a fault probability that is the probability that the assets will become faulty through a simulation based on the static configuration information; if the risk element is related to geographical topography, generating a geographical topography risk model by associating the asset that may become faulty due to the risk element and the fault probability with the location of the asset in the static configuration information; if the risk element is related to the connections between assets, generating a connection relationship risk model by associating the fault probability of the asset that may become faulty due to the risk element with the asset in the configuration information; if the risk element is related to the internal state of an asset, generating an asset internal risk model by associating the fault probability of the asset that may become faulty due to the risk element with the asset; receiving an input specifying an evaluation target, identifying one or more assets to be evaluated as evaluation target assets based on the input specifying the assets, identifying a risk model related to the evaluation target asset from among the geographical topographical risk model, the connection relationship risk model, and the asset internal risk model, calculating a risk assessment value that is an index representing the risk of the evaluation target asset based on the failure probability of the evaluation target asset and the static configuration information using the identified risk model, and associating the risk assessment value of the evaluation target asset with the asset of the risk model; A risk management method to achieve this.

Images