Transcription of A Threat-Driven Approach to Cyber Security
{{id}} {{{paragraph}}}
Example: marketing
A Threat-Driven Approach to Cyber Security
2019 Lockheed Martin Corporation 1 A Threat-Driven Approach to Cyber Security Methodologies, Practices and Tools to Enable a Functionally Integrated Cyber Security Organization Michael Muckin, Scott C. Fitch Lockheed Martin Corporation Abstract Contemporary Cyber Security risk management practices are largely driven by compliance requirements, which force organizations to focus on Security controls and vulnerabilities. Risk management considers multiple facets including assets, threats, vulnerabilities and controls which are jointly evaluated with the variables of probability and impact. Threats cause damage to information systems. Threats utilize vulnerabilities to enact this damage, and Security controls are implemented to attempt to prevent or mitigate attacks executed by threat actors. The unbalanced focus on controls and vulnerabilities prevents organizations from combating the most critical element in risk management: the threats.
• Vulnerability metrics are misinterpreted without additional context, driving unnecessary ... incident analysis, or evaluation of the effectiveness of security control sets. Within these practices, numerous tools will be presented and described. The mindset espoused here – when adopted – will drive change in the cyber security ...
Loading..
Tags:
Information
Domain:
Source:
Link to this page:
Please notify us if you found a problem with this document: