01917nas a2200229   4500008004100000022001400041245010800055210006900163260004200232300000900274490000600283520118900289653003201478653002901510653001801539653002401557653001901581653001501600100001901615700001701634856003601651       2015                        eng d  a1927-032100aA Design Science Approach to Constructing Critical Infrastructure and Communicating Cybersecurity Risks0 aDesign Science Approach to Constructing Critical Infrastructure   aOttawabTalent First Networkc06/2015  a6-160 v53 aAcademics are increasingly examining the approaches individuals and organizations use to construct critical infrastructure and communicate cybersecurity risks. Recent studies conclude that owners and operators of critical infrastructures, as well as governments, do not disclose reliable information related to cybersecurity risks and that cybersecurity specialists manipulate cognitive limitations to overdramatize and oversimplify cybersecurity risks to critical infrastructures. This article applies a design science perspective to the challenge of securing critical infrastructure by developing a process anchored around evidence-based design principles. The proposed process is expected to enable learning across critical infrastructures, improve the way risks to critical infrastructure are communicated, and improve the quality of the responses to citizens’ demands for their governments to collect, validate, and disseminate reliable information on cybersecurity risks to critical infrastructures. These results will be of interest to the general public, vulnerable populations, owners and operators of critical infrastructures, and various levels of governments worldwide. 10aadvanced persistent threats10acritical infrastructures10acybersecurity10adesign propositions10adesign science10aresilience1 aMuegge, Steven1 aCraigen, Dan  uhttp://timreview.ca/article/902