<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta />
    <article-meta>
      <title-group>
        <article-title>Towards a Framework for Definition of Enterprise Safety Indicators</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>Francesco Costantino</string-name>
          <email>francesco.costantino@uniroma1.it</email>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Antonio De Nicola</string-name>
          <email>antonio.denicola@enea.it</email>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Giulio Di Gravio</string-name>
          <email>giulio.digravio@uniroma1.it</email>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Andrea Falegnami</string-name>
          <email>andrea.falegnami@uniroma1.it</email>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Riccardo Patriarca</string-name>
          <email>riccardo.patriarca@uniroma1.it</email>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Massimo Tronci</string-name>
          <email>massimo.tronci@uniroma1.it</email>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Giordano Vicoli</string-name>
          <email>giordano.vicoli@enea.it</email>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Maria Luisa Villani</string-name>
          <email>marialuisa.villani@uniroma1.it</email>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>ENEA - Centro Ricerche Casaccia</institution>
          ,
          <addr-line>Via Anguillarese 301, 00123 Rome</addr-line>
          ,
          <country country="IT">Italy</country>
        </aff>
        <aff id="aff1">
          <label>1</label>
          <institution>Sapienza University of Rome</institution>
          ,
          <addr-line>Via Eudossiana 18, 00184, Rome</addr-line>
          ,
          <country country="IT">Italy</country>
        </aff>
      </contrib-group>
      <abstract>
        <p>Safety of enterprises, as well as socio-technical systems in general, is due to several factors and can be considered an emergent property, depending on non-linear and symbiotic interactions between humans and technical systems taking places in collaborative business processes. The safety-II perspective promotes assessing and gathering meaningful knowledge about normal work, and its effect on safety and productivity. We aim at providing a support to this activity, proposing a three-phases framework for the definition of indicators on enterprise safety performance. This framework includes collection of knowledge on work-asimagined (WAI) business processes, ontology-based modelling of work-as-done (WAD) business processes and some guidelines to define indicators taking into account the actual needs and implicit knowledge of sharp-end operators by means of the Functional Resonance Analysis Method (FRAM).</p>
      </abstract>
      <kwd-group>
        <kwd>eol&gt;FRAM</kwd>
        <kwd>Safety indicators</kwd>
        <kwd>Socio-technical systems</kwd>
        <kwd>Ontologies</kwd>
        <kwd>Semantical models</kwd>
        <kwd>Knowledge Elicitation</kwd>
      </kwd-group>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>1. Introduction</title>
      <p>The growing complexity of business processes, unpredictable interactions of humans and failures
of interoperability services could generate enterprise incidents and, hence, casualties, injuries, and
economic losses. Enterprise modelling and simulation are widely recognized as valuable tools to
reduce the number of these incidents and, hence, increase enterprise resilience. However, a further
issue is due to the fact that business processes are usually conceived and codified by blunt-end
operators (e.g., managers, advisors) that sometimes discard or ignore the real operational conditions
of sharp-end operators and the actual safety flaws.</p>
      <p>The safety-II principle gives a new perspective on socio-technical safety by focusing on
information about normal work, and its effect on safety and productivity rather than on inherent
hazards and risks. To support the activity of sharp-end operators’ knowledge gathering and safety-II
analysis, we propose an ontology-based framework aimed at assessing enterprise resilience by means
of the H(CS)2I indicators (i.e., Human-Centred Safety Crowd-Sensitive Indicators).</p>
      <p>
        The ontology-based framework aims at gathering and making interpretive sense of organizational
performance, relying on the use of the Functional Resonance Analysis Method (FRAM) [
        <xref ref-type="bibr" rid="ref2">1</xref>
        ], which is
a recently introduced method for modelling complex behaviors and non-linear properties of
sociotechnical systems. In particular, the framework supports knowledge collection for FRAM analyses
[
        <xref ref-type="bibr" rid="ref1 ref3">2</xref>
        ], which overcomes traditional top-down theoretical assessment following artificial varieties of
work, i.e. work-as-imagined (WAI), towards a bottom-up approach focused on normal operations, i.e.
work-as-done (WAD). The framework relies also on an innovative gamified approach for knowledge
gathering in order to isolate functional areas of concern. The final aim is to define safety performance
metrics: the above-mentioned H(CS)2I indicators. These latter are expected to support sharp-end
workers in self-assessment of their own work activity, helping middle managers and top managers to
interpret weak signals (both positive and negative) about system performance, supporting at large
organizational decision-making at different organizational levels.
      </p>
      <p>The framework is currently under development in the H(CS)2I project (2019-2021) funded by
INAIL under 2018 SAF€RA EU funding scheme.</p>
      <p>The rest of the paper is organizes as follows. Section 2 presents the overall framework. Section 3
describes the three main phases aimed at defining H(CS)2I indicators and Section 4 provides some
conclusions and future research directions.</p>
      <sec id="sec-1-1">
        <title>2. The H(CS)2I Framework</title>
        <p>
          The core of the H(CS)2I framework is a three-phases process for the development of
HumanCentred Safety Crowd-Sensitive Indicators in Enterprises (see Figure 1). The first phase (Phase 1)
addresses the collection process of WAI knowledge in an industry. The second phase (Phase 2)
focuses on the development of a socially validated ontology [
          <xref ref-type="bibr" rid="ref4">3</xref>
          ] [
          <xref ref-type="bibr" rid="ref5">4</xref>
          ] and crowd-sensitive FRAM
models of the WAD starting from the business processes concerning WAI and from gamified
interviews. The third phase (Phase 3) addresses the development of the H(CS)2I indicators.
        </p>
      </sec>
      <sec id="sec-1-2">
        <title>2.1. Phases of the H(CS)2I Framework</title>
      </sec>
    </sec>
    <sec id="sec-2">
      <title>2.1.1. Developing Knowledge of Industrial Production Processes</title>
      <p>This knowledge collection phase provides for initial characterisation of organisational information
for use in subsequent gamified data collection. The aim is to model a WAI business process both by
gathering existing documentation or through middle manager interviews, model it in a standardized
format (e.g., UML or BPMN) and by using the FRAM notation. This task clearly identifies the
theoretical building blocks for later supporting the determination of any inconsistencies or flaws,
which require adaptation in order to provide for successful work outcomes, either documented or
practiced (WAD).</p>
      <p>Proceedings of the Workshops of I-ESA 2020, 17-11-2020, Tarbes, France
EMAIL: francesco.costantino@uniroma1.it (A. 1); antonio.denicola@enea.it (A. 2); giulio.digravio@uniroma1.it (A. 3),
andrea.falegnami@uniroma1.it (A. 4); riccardo.patriarca@uniroma1.it (A. 5); massimo.tronci@uniroma1.it (A. 6); giordano.vicoli@enea.it
(A. 7); marialuisa.villani@uniroma1.it (A. 8).</p>
      <p>ORCID: 0000-0002-0942-821X (A. 1); 0000-0002-1045-0510 (A. 2); 0000-0001-9241-9121 (A. 3), 0000-0002-9179-0372 (A. 4);
00000001-5299-9993 (A. 5); 0000-0002-6648-9350 (A. 6); 0000-0001-5048-1023 (A. 7); 0000-0002-7582-806X (A. 8).</p>
      <p>© 2020 Copyright for this paper by its authors.</p>
      <p>CPWErooUrckResehdoinpgs hIStSpN:/c1e6u1r3-w-0s.o7r3g UCsEe UpeRrmiWttedorukndsehroCprePatrivoecCeoemdminognssL(iCceEnsUe RAt-trWibuSti.oonr4g.)0 International (CC BY 4.0).</p>
      <p>
        This phase has two aims. The first one is to build an ontological representation of the business
knowledge related to the enterprise production processes, which is required for safety analysis. As an
ontology should reflect an ever-changing reality, this ontology development step could be iterated
several times to include additional knowledge acquired during the process. For the first iteration, the
input consists of the models representing the theoretical representation of work (WAI). For the
subsequent iterations, this task requires the process models representing WAD. The sharp-end
operators perform the process related to this step. This process encompasses gamification techniques
[
        <xref ref-type="bibr" rid="ref6">5</xref>
        ] in order to increase the engagement of the sharp-end operators (e.g. by earning points or game
rewards) and a computational creativity approach [
        <xref ref-type="bibr" rid="ref7">6</xref>
        ] to stimulate their contributions. The ontology
extends an ontological upper model derived from the FRAM named FRAM Upper-level Model
(FUM) [
        <xref ref-type="bibr" rid="ref8">7</xref>
        ]. This latter represents the most relevant FRAM concepts and the ontological relationships
linking them. A FRAM-based ontology of enterprise production is built by extending FUM with
domain-specific concepts. Furthermore, the FUM facilitates engineering of FRAM-based ontologies
to be used to support the process of designing FRAM models. Based on the knowledge gathered in the
ontology through the gamified approach, crowd-sensitive FRAM models representing WAD are
created by safety analysts.
      </p>
      <p>The quality of identification of WAD knowledge has to be assessed against several dimensions
including semantics (i.e., absence of contradictory concepts), syntactic quality of WAD models,
completeness, fidelity, relevance and social acceptance by sharp-end operators.</p>
      <sec id="sec-2-1">
        <title>2.1.3. Definition of H(CS)2I Indicators</title>
        <p>
          This phase aims at developing enterprise safety indicators to be used by top managers for
enterprise resilience assessment. To this purpose, firstly, the FRAM models, both the one based on
procedural work (WAI) developed during the first phase, and the one on normal operational work
(WAD) developed during the second phase, are analysed. The initial purpose of this analysis consists
in comparing the two developed models to identify discrepancies between WAI and WAD. This is a
primary area of concern, since it implies that the system presents relevant design flaws that require
thus continuous adaptation to overcome constraint and to work around other unintended
consequences. Secondly, knowledge gathered through the ontology-based gamified approach is used
to develop a semi-quantitative simulation model based on the FRAM model. Its purpose is to combine
different variability states in order to detect the potential for functional resonance. Traditionally, the
FRAM modelling approach is purely qualitative, and relies on interviews and observational studies,
which could be affected by subjectivity and are normally time-intensive. On the other hand, the
simulation model is semi-quantitative since it would relate criticality scores to a numeric scale with
the linguistic data reported by the operators through the ontology-based gamified approach. The
approach could be based on Monte Carlo simulation [
          <xref ref-type="bibr" rid="ref1 ref3">2</xref>
          ], as a means to explore the potential
combination of variability for the purpose of identifying the functional aspects with the higher
potential for functional resonance. The purpose of this task is thus to use the discrepancies as well as
data describing adaptive behaviors in order to define indicators based on an increased involvement of
operators, as well as the analysis and synthesis of the evolving context of work.
        </p>
        <p>
          The H(CS)2I framework aims at defining multiple indicators [
          <xref ref-type="bibr" rid="ref9">8</xref>
          ] grouped at different granularity
layers to represent criticalities at different abstraction levels. Even though the methodological
contribution remains valid in any socio-technical system, the specific framework as well as the
indicators are based on the organization-specific data and knowledge. As a matter of example, in a
generic industrial plant, indicators could be specifically related to measuring the frequency and
quality level of communications among sharp-end operators or inter-level communications between
Proceedings of the Workshops of I-ESA 2020, 17-11-2020, Tarbes, France
EMAIL: francesco.costantino@uniroma1.it (A. 1); antonio.denicola@enea.it (A. 2); giulio.digravio@uniroma1.it (A. 3),
andrea.falegnami@uniroma1.it (A. 4); riccardo.patriarca@uniroma1.it (A. 5); massimo.tronci@uniroma1.it (A. 6); giordano.vicoli@enea.it
(A. 7); marialuisa.villani@uniroma1.it (A. 8).
        </p>
        <p>ORCID: 0000-0002-0942-821X (A. 1); 0000-0002-1045-0510 (A. 2); 0000-0001-9241-9121 (A. 3), 0000-0002-9179-0372 (A. 4);
00000001-5299-9993 (A. 5); 0000-0002-6648-9350 (A. 6); 0000-0001-5048-1023 (A. 7); 0000-0002-7582-806X (A. 8).</p>
        <p>© 2020 Copyright for this paper by its authors.</p>
        <p>CWPErooUrckResehdoinpgs IhStSpN:/c1e6u1r3-w-0s.o7r3g UCsEe UpeRrmiWttedorukndsehroCprePatrivoecCeoemdminognssL(iCceEnsUe RAt-trWibuSti.oonr4g.)0 International (CC BY 4.0).
middle management and sharp-end operators, or even assessing the presence and status of the tools
required for developing a specific maintenance activity.</p>
      </sec>
    </sec>
    <sec id="sec-3">
      <title>3. Conclusions</title>
      <p>
        The theory of Resilience Engineering [
        <xref ref-type="bibr" rid="ref10">9</xref>
        ] supports the trade-off between complexity-oriented
theories and pragmatic tools usable for decision-makers to increase system safety. In this context, the
H(CS)2I framework aims at enhancing traditional approach for resilience assessment through a
methodological contribution based on an innovative ontology-based gamified approach for FRAM.
Gamification is used to increase engagement of operators at providing data and increases the capacity
of gathering reliable collective data about normal work. Ontology becomes thus necessary to build a
reliable formal representation of FRAM model. Hence we propose an innovative Resilience
Engineering-oriented gamified approach aimed at capturing bottom-up adaptive behaviors and normal
work variability in order to generate database usable for running semi-quantitative simulations and
support a systemic analysis of areas of concern. The functional resonance approach, combined with
the gamified approach would thus support the definition of proxy measures of socio-technical safety,
i.e. the H(CS)2I. These latter are expected to represent holistic performance metrics usable as early
warning indicators for system critical transitions in riskier states.
      </p>
    </sec>
    <sec id="sec-4">
      <title>4. Acknowledgements</title>
      <p>This work is partially supported by the H(CS)2I project, which is funded by the Italian National
Institute for Insurance against Accidents at Work (INAIL) under the 2018 SAF€RA EU funding
scheme.</p>
    </sec>
    <sec id="sec-5">
      <title>5. References</title>
      <p>EMAIL: francesco.costantino@uniroma1.it (A. 1); antonio.denicola@enea.it (A. 2); giulio.digravio@uniroma1.it (A. 3),
andrea.falegnami@uniroma1.it (A. 4); riccardo.patriarca@uniroma1.it (A. 5); massimo.tronci@uniroma1.it (A. 6); giordano.vicoli@enea.it
(A. 7); marialuisa.villani@uniroma1.it (A. 8).</p>
      <p>ORCID: 0000-0002-0942-821X (A. 1); 0000-0002-1045-0510 (A. 2); 0000-0001-9241-9121 (A. 3), 0000-0002-9179-0372 (A. 4);
00000001-5299-9993 (A. 5); 0000-0002-6648-9350 (A. 6); 0000-0001-5048-1023 (A. 7); 0000-0002-7582-806X (A. 8).
© 2020 Copyright for this paper by its authors.</p>
      <p>Use permitted under Creative Commons License Attribution 4.0 International (CC BY 4.0).</p>
      <p>CWPErooUrckResehdoinpgs IhStSpN:/c1e6u1r3-w-0s.o7r3g CEUR Workshop Proceedings (CEUR-WS.org)</p>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          <article-title>2.1.2. Gamified Collection of Work-As-Done Knowledge</article-title>
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          [1]
          <string-name>
            <given-names>E.</given-names>
            <surname>Hollnagel. FRAM: The Functional Resonance Analysis Method - Modelling Complex Sociotechnical Systems</surname>
          </string-name>
          , Ashgate,
          <year>2012</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          [2]
          <string-name>
            <given-names>R.</given-names>
            <surname>Patriarca</surname>
          </string-name>
          ,
          <string-name>
            <given-names>G. Di</given-names>
            <surname>Gravio</surname>
          </string-name>
          , and
          <string-name>
            <given-names>F.</given-names>
            <surname>Costantino</surname>
          </string-name>
          .
          <article-title>A Monte Carlo evolution of the Functional Resonance Analysis Method (FRAM) to assess performance variability in complex systems</article-title>
          ,
          <source>Safety Science</source>
          , vol.
          <volume>91</volume>
          ,
          <year>2017</year>
          , p.
          <fpage>49</fpage>
          -
          <lpage>60</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          [3]
          <string-name>
            <surname>A. De Nicola</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          <string-name>
            <surname>Missikoff</surname>
            , and
            <given-names>R.</given-names>
          </string-name>
          <string-name>
            <surname>Navigli</surname>
          </string-name>
          . A Software Engineering Approach to Ontology Building.
          <source>Information systems</source>
          ,
          <volume>34</volume>
          (
          <issue>2</issue>
          ):
          <fpage>258</fpage>
          -
          <lpage>275</lpage>
          ,
          <year>2009</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          [4]
          <string-name>
            <surname>A. De Nicola</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          <string-name>
            <surname>Missikoff</surname>
          </string-name>
          ,
          <article-title>A lightweight methodology for rapid ontology engineering</article-title>
          ,
          <source>Communications of the ACM</source>
          <volume>59</volume>
          (
          <issue>3</issue>
          ) (
          <year>2016</year>
          )
          <fpage>79</fpage>
          -
          <lpage>86</lpage>
          . doi:
          <volume>10</volume>
          .1145/2818359.
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          [5]
          <string-name>
            <given-names>S.</given-names>
            <surname>Deterding</surname>
          </string-name>
          ,
          <string-name>
            <given-names>D.</given-names>
            <surname>Dixon</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Khaled</surname>
          </string-name>
          , And L.
          <string-name>
            <surname>Nacke</surname>
          </string-name>
          .
          <article-title>From game design elements to gamefulness: defining gamification</article-title>
          .
          <source>In Proceedings of the 15th international academic MindTrek conference: Envisioning future media environments</source>
          ,
          <year>2011</year>
          , p.
          <fpage>9</fpage>
          -
          <lpage>15</lpage>
          .
        </mixed-citation>
      </ref>
      <ref id="ref7">
        <mixed-citation>
          [6]
          <string-name>
            <surname>A. De Nicola</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          <string-name>
            <surname>Melchiori</surname>
            , and
            <given-names>M.L.</given-names>
          </string-name>
          <string-name>
            <surname>Villani</surname>
          </string-name>
          .
          <article-title>Creative Design of Emergency Management Scenarios Driven by Semantics: An Application to Smart Cities</article-title>
          .
          <source>Information Systems</source>
          ,
          <volume>81</volume>
          :
          <fpage>21</fpage>
          -
          <lpage>48</lpage>
          ,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref8">
        <mixed-citation>
          [7]
          <string-name>
            <surname>A. De Nicola</surname>
            , G. Vicoli,
            <given-names>M. L.</given-names>
          </string-name>
          <string-name>
            <surname>Villani</surname>
            ,
            <given-names>R.</given-names>
          </string-name>
          <string-name>
            <surname>Patriarca</surname>
          </string-name>
          ,
          <article-title>and</article-title>
          <string-name>
            <given-names>A.</given-names>
            <surname>Falegnami</surname>
          </string-name>
          .
          <article-title>Enhancement of Safety Imagination in Socio-Technical Systems with Gamification and Computational Creativity</article-title>
          .
          <source>In Enhancing Safety: The Challenge of Foresight. Proceedings of the 53rd ESReDA Seminar hosted by the European Commission Joint Research Centre 14th-15th November</source>
          <year>2017</year>
          , Ispra, Italy, pages
          <fpage>158</fpage>
          -
          <lpage>169</lpage>
          ,
          <year>December 2018</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref9">
        <mixed-citation>
          [8]
          <string-name>
            <given-names>F.</given-names>
            <surname>Costantino</surname>
          </string-name>
          ,
          <string-name>
            <surname>A. De Nicola</surname>
            ,
            <given-names>G. Di</given-names>
          </string-name>
          <string-name>
            <surname>Gravio</surname>
            ,
            <given-names>A.</given-names>
          </string-name>
          <string-name>
            <surname>Falegnami</surname>
            ,
            <given-names>R.</given-names>
          </string-name>
          <string-name>
            <surname>Patriarca</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          <string-name>
            <surname>Tronci</surname>
            , G. Vicoli, and
            <given-names>M. L.</given-names>
          </string-name>
          <string-name>
            <surname>Villani</surname>
          </string-name>
          .
          <article-title>Crowd sensitive indicators for proactive safety management: a theoretical framework</article-title>
          .
          <source>In Proceedings of the 30th European Safety and Reliability Conference - ESREL 2020 - Venice</source>
          , Italy,
          <fpage>1st</fpage>
          -6th
          <source>November</source>
          <year>2020</year>
          ,
          <year>2020</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref10">
        <mixed-citation>
          [9]
          <string-name>
            <given-names>R.</given-names>
            <surname>Patriarca</surname>
          </string-name>
          ,
          <string-name>
            <given-names>J.</given-names>
            <surname>Bergström</surname>
          </string-name>
          ,
          <string-name>
            <given-names>G. Di</given-names>
            <surname>Gravio</surname>
          </string-name>
          , And
          <string-name>
            <given-names>F.</given-names>
            <surname>Costantino</surname>
          </string-name>
          .
          <article-title>Resilience engineering: Current status of the research and future challenges, Safety Science</article-title>
          , vol.
          <volume>102</volume>
          ,
          <year>2018</year>
          , p.
          <fpage>79</fpage>
          -
          <lpage>100</lpage>
          .
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>