Improving Cyber Security and Mission Assurance Via Cyber Preparedness (Cyber Prep) Levels

• Published in: 2010 IEEE Second International Conference on Social Computing pp. 1147 - 1152
• Main Authors: Bodeau, Deborah J, Graubart, Richard, Fabius-Greene, Jennifer
• Format: Conference Proceeding
• Language: English
• Published: IEEE 01-08-2010
• Subjects: abuse and crime involving computers; Information systems; invasive software; Malware; Organizations; Resilience; risk management; security; Supply chains; unauthorized access
• ISBN: 1424484391; 9781424484393
• DOI: 10.1109/SocialCom.2010.170

Increasing dependence on cyberspace makes preparedness against cyber threats integral to mission assurance. The nature of cyber threats in general - and advanced persistent threats in particular - requires a longer-term commitment from senior leadership, including vision, strategy, and investment prioritization as well as the organizational agility to respond to ever-changing tactics and techniques. The cyber preparedness (Cyber Prep) methodology enables an organization to (1) characterize the cyber threats that an organization or mission faces; (2) determine the level of preparedness necessary to ensure mission success; (3) facilitate strategic planning for cyber security by setting preparedness objectives; and (4) establish priorities for cyber security investment planning and management decisions. This paper presents the framework underlying the Cyber Prep methodology.