CCE Phase 1: Consequence Prioritization

Technical Report · Tue May 05 00:00:00 EDT 2020

DOI:https://doi.org/10.2172/1617458· OSTI ID:1617458

Freeman, Sarah G. ^[1]; St. Michel, Curtis P. ^[1]; Johnson, Nathan Hill ^[1]

---

1. Idaho National Lab. (INL), Idaho Falls, ID (United States)

Idaho National Laboratory (INL) developed the Consequence-driven Cyber-informed Engineering (CCE) methodology to provide public and private organizations with steps to work collaboratively and establish a working relationship to protect critical infrastructure and other national assets. This process is a considerable undertaking, iterative in nature, and—as time and resources allow—should become a part of a company’s culture. By focusing on the impact of potentially negative Events, CCE provides a better understanding of how and why adversaries can affect critical functions and services using cyber-enabled sabotage. This document describes Phase 1 of the CCE process.

• Research Organization: Idaho National Laboratory (INL), Idaho Falls, ID (United States)
• Sponsoring Organization: USDOE Office of Cybersecurity, Energy Security, and Emergency Response (CESER)
• DOE Contract Number: AC07-05ID14517
• OSTI ID: 1617458
• Report Number(s): INL/EXT--20-58089-Rev000
• Country of Publication: United States
• Language: English

Related Subjects

99 GENERAL AND MISCELLANEOUS
CCE
CIE
Consequence-Driven Cyber-Informed Engineering
Consequence-based Targeting
Cyber
Cyber Risk
Cyber Supply Chain Risk
Cyber Threat and Vulnerability
Cyber-Informed Engineering
Cyber-Resilience
Cybersecurity Resilience
Energy Transition
Integrating Cybersecurity
consequence prioritization
consequence-driven cyber-informed engineering
critical infrastructure
cyber-events
cybersecurity
industrial control system
operational technology