Statement of Purpose
The topic of this study is mission-cyber dependency mapping for Cyber Mission Assurance (MA). The purpose of the research effort is to develop an Air Force standardized mission-cyber dependency mapping framework at the operational-level to provide detailed guidance for Air Force identified critical missions based on a meta-analysis of dependency mapping research. This will be done by defining a cyber MA framework to be used by cyber defenders and mission owners to make informed decisions in the defense of their cyberspace environment and meet mission objectives.
Statement of the Problem
The general problem stimulating addressed in this research effort is the shortfalls of Information Assurance (IA) as related to ensuring successful mission execution. There is recognition across the military community of the operational shortfalls of IA. Within the military environment, the focus is on successful execution of the mission with the minimum causalities and loss of life, as opposed to the commercial environment where the financial bottom line can at times be the primary focus.
The scope of IA has grown past just security concerns of traditional information systems. IA is information operations that protect and defend information and information systems by ensuring their availability, integrity, authentication, confidentiality, and nonrepudiation (CNSSI 4009, 2010). IA basic tenets of availability, integrity, authentication, confidentiality, and non-repudiation focus on the information not necessarily the mission. Protecting the information in information system can conflict with the successful completion of the mission. The operational necessity of assuring successful mission execution has generated a shi...
... middle of paper ...
...agement-team members: An exploratory study. (Order No. 3369003, Capella University). ProQuest Dissertations and Theses, 175-n/a. Retrieved from http://search.proquest.com/docview/305160127?accountid=44888.
Rechard, R. P. (1999). Historical relationship between performance assessment for radioactive waste disposal and other types of risk assessment. Risk Analysis, 19(5), 763-807. doi:10.1023/A:1007058325258
White House (2000). Defending america’s cyberspace: National plan for information systems protection: Version 1.0: An invitation to dialogue. The White House, Washington, DC: author. Retrieved from https://www.fas.org/irp/offdocs/pdd/CIP-plan.pdf
Winter, M. W. (1995). Software fault tree analysis of an automated control system device written in ada. (Master’s thesis, Naval Postgraduate School, Monterey, CA). Retrieved from http://handle.dtic.mil/100.2/ADA303377
Wilshusen, Gregory. "Cyber Security: A Better Defined and Implemented National Strategy Is Needed to Address Persistent Challenges." United States Government Accountability Office. http://www.gao.gov/assets/660/652817.pdf (accessed April 27, 2014.
This paper is being furnished to provide the CIO with a technology evaluation of vulnerability scanning. The information provided will ensure that the CIO has the required information to make the best decision in regards to this technology. This paper provides a brief understanding of vulnerability scanning, its many forms, the types of scanners available, the advantages and disadvantages, and the costs involved.
...ial approaches which are Normal Accident and HROs, although it seems certain that both of them tends to limit the progression that can contribute toward achieving to highly protective systems. This is because the scope of the problems is too narrow and the potential of the solutions is too limited as well. Hence, Laporte and Consolini et.al., (1991) as cited in Marais, et.al., (2004) conclude that the most interesting feature of the high reliability organization is to prioritize both performance and security by the managerial oversight. In addition, the goal agreement must be an official announcement. In essence, it is recommended that there is a continuing need in the high risk organizations for more awareness of developing security system and high reliability environment in order to gain highly successful method to lower risk in an advance technology system.
The first two demographic characteristics to be discussed are age and gender. A generation gap between team members creates a wide range of perspectives and is advantageous.
Silver Star Mines risk assessment illustrates how a company can be at great danger if proper security measures and policies are not put in effect on every business process. In fact, “an IT security risk assessment is needed for each asset in the organization that requires protection” (Stallings, 2015, p. 486). According to the initial review, Silver Star Mines risk assessment highlights the following risk areas: Supervisory Control and Data Acquisition (SCADA) at top critical risk, stored information at extreme risk, financial, procurement, production systems at high risk and e-mail services at high risks accordingly. With this in mind, management should evaluate and take proper security measures to assets that need the most protection, assets
Whitman, M., & Mattord, H. (2010). Management of information security. (3rd ed., p. 6). Boston, MA: Cengage Learning.
Trias, Eric D., and Bryan M. Bell. 2010. "Cyber This, Cyber That ... So What?." Air & Space
Operation Anaconda was a success, but it was not without errors, and could have ended a number of ways. Numerous Soldiers, Sailors, and Airmen were killed or gravely wounded due to several major miscalculations that could have been easily avoided. Some Commanders will eventually either ignore or undervalue critical intelligence during warfare and, unfortunately, that will not stop anytime soon. Also, the over-compartmentalization of intelligence can create problems for a mission. This paper details the critical role of evaluation and dissemination of intelligence in warfare. Operation Anaconda, the mission to remove Al Qaeda and Taliban forces from the Shahi-Kot valley, while appearing to be a success, should have been a much better performance
In recent years, many possible plans to enact government regulation to improve cybersecurity have been suggested. Most recently, in 2017, then U.S. president Barack Obama implemented the Cybersecurity National Action Plan (CNAP). The plan would have invested $19 billion in cybersecurity by gathering experts to make recommendations in regards to cyber security, help secure the government IT group, and encourage more advanced security measures (Daniel 1). However, while CNAP does present a way to solve the problem, it just adds another program that attempts to enhance cybersecurity: “It is the multiplicity of programs and division of responsibility that diminishes their effectiveness. At least eleven federal agencies bear significant responsibility for cybersecurity” (Cohen 1). Every so often, another cybersecurity program will be established, but former plans are seldom removed. This leads to a large amount of departments to share responsibility, which creates general confusion and limits each department’s power. Furthermore, widespread government regulation may weaken cybersecurity. Many fear that any regulation would not be flexible enough and would instead allow easier hacking (Ridge 3). If every system in the entire nation had the same security measures, it would be much easier to break into as by breaking into one system, a hacker a could break into everything.
Thus the performance of the system can be enhanced by achieving the CIA (Confidentiality, Integrity, and Availability) properties. The research work also enhances the image of the organization by securing user credentials more effectively.
United States Executive Office of the President. (2009). Cyber space policy review: Assuring a Trusted and Resilient Information and Communications Infrastructure. (pp. 1-38). Retrieved from http://www.whitehouse.gov/assets/documents/Cyberspace_Policy_Review_final.pdf
Many countries have already embraced the power of cyber space. “In Japan, a new strategy has been put forward that includes the use of cyber space in defense policy and military doctrine” (Olender 1). The strange thing about cyber warfare is that the larger and more advanced countries are the countries that are most at risk. Those countries, such as the United States, have become so dependent on technology that if they were attacked, they would have the most to lose. Works Cited Crowther, G. Alexander, and Shaheen Ghori.
National and International Security is a sum of the actions taken by countries and other organizations that can guarantee the safety and well being of their population. It is vital for a nation to pre-emptively discover what issues could affect their security, and take action to prevent any detrimental or harmful events from happening. With the development of technology and the transition into a more technologically savvy society, cyber security has become one of the most prevalent and important economic and national security issues that the United States will come to face.
Nowadays, the information is the most treasured asset in an organization, due to it along with the experience represents the input necessary to take appropriate decisions and consequently to have success in the business. Almost all the information and knowledge related with the processes business, goods and services offered by a company, is processed, managed and stored through technology and information systems, thus the security of information has become increasingly important and plays a critical role in the enterprise government.
The first thing that we must consider about Information Security is that there is not a final destination at which we can arrive. IT Security is an ongoing set of processes and activities that requires attention and expertise on a daily basis. It is important to understand that systems are not secured by themselves and it is our responsibility to maintain and improve them periodically as required. It is of vital importance to establish the appropriate mechanisms and requirements in order to support the company’s CIA triad. The following report will provide you guidance about auditing and hardening techniques applied though the 7 Domains by utilizing IT Security Best Practices.