Synopsis of Evaluating Security Controls Based on Key Performance Indicators and Stakeholder Mission Value

Conference · Mon Dec 01 00:00:00 EST 2008

DOI:https://doi.org/10.1109/HASE.2008.61· OSTI ID:946765

Abercrombie, Robert K.  ^[1]; Sheldon, Frederick T. ^[1]; Mili, Ali ^[2]

---

1. ORNL
2. New Jersey Institute of Technology

Information security continues to evolve in response to disruptive changes with a persistent focus on information-centric controls and a healthy debate about balancing endpoint and network protection, with the goal of improved enterprise and business risk management. Economic uncertainty, intensively collaborative work styles, virtualization, increased outsourcing and ongoing compliance pressures require careful consideration and adaptation of a balanced approach. The Cyberspace Security Econometrics System (CSES) provides a measure of reliability, security and safety of a system that accounts for the criticality of each requirement as a function of one or more stakeholders' interests in that requirement. For a given stakeholder, CSES reflects the variance that mayexist among the stakes one attaches to meeting each requirement. This paper summarizes the basis, objectives and capabilities for the CSES includinginputs/outputs as well as the structural underpinnings.

• Research Organization: Oak Ridge National Laboratory (ORNL), Oak Ridge, TN (United States)
• Sponsoring Organization: USDOE
• DOE Contract Number: AC05-00OR22725
• OSTI ID: 946765
• Resource Relation: Conference: Eleventh IEEE International Symposium on High Assurance Systems Engineering (HASE'08) - Nanjing, , China - 12/3/2008 12:00:00 AM-12/5/2008 12:00:00 AM, Nanjing (China), 3-5 Dec 2008
• Country of Publication: United States
• Language: English

Related Subjects

97 MATHEMATICS AND COMPUTING
99 GENERAL AND MISCELLANEOUS//MATHEMATICS, COMPUTING, AND INFORMATION SCIENCE
INFORMATION SYSTEMS
COMPUTER NETWORKS
SECURITY
ECONOMETRICS
Cyber Security
Risk Management
Cyber Security Controls
Risk Assessment