Consequence-driven cyber-informed engineering (CCE)

Technical Report · Tue Oct 18 04:00:00 EDT 2016

DOI:https://doi.org/10.2172/1341416· OSTI ID:1341416

Freeman, Sarah G. ^[1]; St Michel, Curtis ^[1]; Smith, Robert ^[1]; Assante, Michael ^[1]

---

1. Idaho National Lab. (INL), Idaho Falls, ID (United States)

The Idaho National Lab (INL) is leading a high-impact, national security-level initiative to reprioritize the way the nation looks at high-consequence risk within the industrial control systems (ICS) environment of the country’s most critical infrastructure and other national assets. The Consequence-driven Cyber-informed Engineering (CCE) effort provides both private and public organizations with the steps required to examine their own environments for high-impact events/risks; identify implementation of key devices and components that facilitate that risk; illuminate specific, plausible cyber attack paths to manipulate these devices; and develop concrete mitigations, protections, and tripwires to address the high-consequence risk. The ultimate goal of the CCE effort is to help organizations take the steps necessary to thwart cyber attacks from even top-tier, highly resourced adversaries that would result in a catastrophic physical effect. CCE participants are encouraged to work collaboratively with each other and with key U.S. Government (USG) contributors to establish a coalition, maximizing the positive effect of lessons-learned and further contributing to the protection of critical infrastructure and other national assets.

• Research Organization: Idaho National Laboratory, Idaho Falls, ID (United States)
• Sponsoring Organization: USDOE
• DOE Contract Number: AC07-05ID14517
• OSTI ID: 1341416
• Report Number(s): INL/EXT--16-39212
• Country of Publication: United States
• Language: English

Related Subjects

97 MATHEMATICS AND COMPUTING
CCE
CIE
Consequence-Driven Cyber-Informed Engineering
Consequence-based Targeting
Cyber
Cyber Risk
Cyber Supply Chain Risk
Cyber Threat and Vulnerability
Cyber-Informed Engineering
Cyber-Resilience
Cybersecurity Resilience
Energy Transition
Integrating Cybersecurity
Mission Support Center
consequence prioritization
critical infrastructure protection
cyber security
cyber-informed
cyber-informed engineering
electric grid security
threat analysis