CI ‐ DR ™ Security Program Components
Richard Moore · 2020
Building a sustainable cyber intelligence-driven risk (CI-DR) program has to be part of a larger embryonic cybersecurity program. This chapter is an overview of functional capabilities, how the “connective tissue” of each capability provides key intelligence data to assist in effective decision support structures. The foundational capabilities that provide the embryonic matrix or connective tissue are part of a specifically structured information/cybersecurity program, as it is within this program the CI-DR program is a substrate that is designated as the protector of the organization. A CI-DR should be considered a transformational change to an information security or cybersecurity program. The governance function captures the capabilities and practices to consistently and cohesively operate a mature cybersecurity and risk management program. Architecture in a CI-DR program is differentiated from IT architecture, which has an operational or availability focus; consider this more of a security architecture capability.