Objectives of a Cyber Intelligence‐Driven Risk Program
Richard Moore · 2020
The CI-DR program strives to achieve two objectives. To achieve the first objective of the CI-DR program, there are four tasks. First, the program must evaluate the existing cyber conditions, cyber risks, and potential operational losses from cyber events and incidents while taking into account the many internal or external adversarial capabilities holistically. Second, based on existing cyber conditions and cyber capabilities, the program estimates possible cyber adversarial courses of action and provides insight into possible future actions. Third, the program aids in identifying vulnerabilities that could be exploited by adversaries and the operational impact it can have on the organization. Fourth, the program and the “knowledge” created assists in the development and evaluation of the organization’s courses of action for decisions based on the first three tasks. The second objective of the CI-DR program is to protect organizations, through cyber counterintelligence activities, intending to deny adversaries valuable information about an organization’s situation.