CCE Phase 1: Consequence Prioritization

Technical Report · Tue May 05 00:00:00 EDT 2020

DOI:https://doi.org/10.2172/1617458· OSTI ID:1617458

Freeman, Sarah G.  ^[1]; St. Michel, Curtis P. ^[1]; Johnson, Nathan Hill ^[1]

---

1. Idaho National Lab. (INL), Idaho Falls, ID (United States)

Idaho National Laboratory (INL) developed the Consequence-driven Cyber-informed Engineering (CCE) methodology to provide public and private organizations with steps to work collaboratively and establish a working relationship to protect critical infrastructure and other national assets. This process is a considerable undertaking, iterative in nature, and—as time and resources allow—should become a part of a company’s culture. By focusing on the impact of potentially negative Events, CCE provides a better understanding of how and why adversaries can affect critical functions and services using cyber-enabled sabotage. This document describes Phase 1 of the CCE process.

• Research Organization: Idaho National Laboratory (INL), Idaho Falls, ID (United States)
• Sponsoring Organization: USDOE Office of Cybersecurity, Energy Security, and Emergency Response (CESER)
• DOE Contract Number: AC07-05ID14517
• OSTI ID: 1617458
• Report Number(s): INL/EXT-20-58089-Rev000; TRN: US2106525
• Country of Publication: United States
• Language: English

Related Subjects

99 GENERAL AND MISCELLANEOUS
critical infrastructure
consequence-driven cyber-informed engineering
cybersecurity
industrial control system
operational technology
consequence prioritization
CCE
cyber-events
Cyber-Informed Engineering
CIE
Cybersecurity Resilience
Consequence-based Targeting
Energy Transition
Integrating Cybersecurity
Cyber Risk
Cyber Supply Chain Risk
Cyber-Resilience
Cyber
Cyber Threat and Vulnerability