Cyber Prep 2.0: Motivating Organizational Cyber Strategies in Terms of Preparedness

Abstract

As cyber threats evolve, organizations increasingly need to define their strategies for cyber security, defense, and resilience. Cyber Prep is a threat-oriented approach that allows an organization to define and articulate its threat assumptions, and to develop organization-appropriate, tailored aspects of a preparedness strategy. Cyber Prep focuses on advanced threats, but also includes material related to conventional cyber threats. Cyber Prep can be used in standalone fashion, or it can be used to complement and extend the use of other, more detailed frameworks (e.g., the NIST Cybersecurity Framework) and threat models. This paper provides detailed background on the Cyber Prep methodology, to help systems engineers and other analysts who are applying that methodology to understand its nuances and to situate it in the larger landscape of cyber strategic planning and risk management frameworks and methodology.

Document Details

• Document Type: Technical Report
• Publication Date: May 01, 2017
• Accession Number: AD1107869

Entities

People

• Deborah Bodeau
• Richard D. Graubart

Organizations

• MITRE Corporation

Tags

Communities of Interest

• Cyber

DTIC Thesaurus Topics

• Business Administration
• Commerce
• Computer Crime
• Computers
• Crime
• Cyber Defense Techniques
• Cyber Threats
• Cyberattacks
• Cybersecurity
• Cyberspace
• Cyberspace Operations
• Denial Of Service Attack
• Department Of Homeland Security
• Engineers
• Governments
• Information Security
• Information Systems
• Intellectual Property
• Intrusion Detection
• National Security
• Operations Security
• Organizational Structure
• Situational Awareness
• Systems Engineering
• Urban Areas

Fields of Study

• Computer science

Readers

• Irregular Warfare and Special Operations Cyberspace Operations against Adversarial Threats.
• Systems Analysis and Design

Technology Areas

• Cyber