Risk-awareness in resilient networks design: Value-at-risk is enough

The paper discusses business impact analysis in the context of resilient networks. The emphasis is put on risk evaluation using Value-at-Risk (VaR) and Conditional VaR measures. The concerns known for VaR are shown, especially the theoretical lack of subadditivity. The study shows that in practice the disadvantages do not appear in resilient networks design, and there is no need to apply the more complex CVaR.