Cyber Security and Cyber Resiliency
Abstract
Cybersecurity and Cyber Resiliency efforts harden the GMD system against a cyber-attack and reduces system vulnerabilities. The strategy implements cybersecurity and cyber resiliency systems throughout the lifecycle to flow requirements to the Ground Based Interceptor and GMD Ground Systems to influence system development. Early cyber testing is completed to identify vulnerabilities and fixes early in the design process. Recurring efforts: -Implement the GMD Cybersecurity Risk Process across all systems to execute risk-based decisions on cybersecurity controls -Implement robust cyber resiliency in the GMD weapon systems by developing system level requirements that flow to component level designs, allowing the GMD system to operate in a cyber-contested environment -Support testing on developmental systems in a virtualized environment by integrating cyber test events allowing execution of specific cyber threat vectors on developmental software in an effort to identify capability flaws that will be assessed through the cyber risk process -Tests Cooperative Vulnerability and Penetration Assessment (CVPA) to discover unknown vulnerabilities and determine effectiveness of mitigations from development level cyber testing -Tests Support Adversarial Assessment penetration to determine effectiveness of cyber-attacks in an operational environment along with the effectiveness of the operational and technical mitigations implemented from developmental cyber testing -Implements software and hardware fixes to address weaknesses found during testing -Develop intermediate cybersecurity processes and procedures that provide operators, maintainers, and Warfighter specific steps to recognize and react to cyber-attacks, thus advancing the operational cyber resiliency through the defensive cyber operations capability -Develop and execute quarterly cybersecurity training scenarios allowing fire control operators and network defenders to train in a cyber-contested environment while in a kinetic engagement scenario -Provide training opportunities for Fire Control Operators and Cyber Incident Responders to test Tactics, Techniques, and Procedures to improve resiliency to a cyber-attack Specific and/or unique accomplishments to each FY are as follows:
Document Details
- Document Type
- Accomplishment
- Publication Date
- Oct 01, 2024
- Source ID
- 2db59d01365f541aa353deb46da9770c