Countering Cyber Sabotage: Introducing Consequence-Driven, Cyber-Informed Engineering (Cce) introduces a new methodology to help critical infrastructure owners, operators and their security practitioners make demonstrable improvements in securing their most important functions and processes.
Concluding chapter 9 covers training options and looks towards a future where these concepts are scaled more broadly..
The CCE phase chapters take the reader on a more granular walkthrough of the methodology with examples from the field, phase objectives, and the steps to take in each phase.
Chapter 4 describes how to prepare for an engagement, and chapters 5-8 address each of the four phases.
Chapters 2 and 3 describe the origins of the methodology and set the stage for the more in-depth examination that follows.
Chapter 1 recaps the current and near-future states of digital technologies in critical infrastructure and the implications of our near-total dependence on them.
The most pressing threat is cyber-enabled sabotage, and CCE begins with the assumption that well-resourced, adaptive adversaries are already in and have been for some time, undetected and perhaps undetectable.
CCE is a validation that Engineering first principles can be applied to the most important cybersecurity challenges and in so doing, protect organizations in ways current approaches do not.
It is the cumulative, downstream effects from potential regional blackouts, military mission kills, transportation stoppages, water delivery or treatment issues, and so on.
From a national security perspective, it is not just the damage to the military, the economy, or essential critical infrastructure companies that is a concern.
Current best practice approaches to Cyber defense struggle to stop targeted attackers from creating potentially catastrophic results.
Countering Cyber Sabotage: Introducing Consequence-Driven, Cyber-Informed Engineering (Cce) introduces a new methodology to help critical infrastructure owners, operators and their security practitioners make demonstrable improvements in securing their most important functions and processes
