NDLI: Goal-based assessment for the cybersecurity of critical infrastructure

Content Provider	IEEE Xplore Digital Library
Author	Merrell, S.A. Moore, A.P. Stevens, J.F.
Copyright Year	2010
Abstract	Undertaking a comprehensive cybersecurity risk assessment of the networks and systems of a single infrastructure, or even a single organization of moderate size, requires significant resources. Efforts to simplify the assessment instrument usually obscure the ultimate goal of the assessment and the motivations for the assessment questions. This can make it difficult for assessors to justify the questions and can undermine the credibility of the assessment in the eyes of the organizations assessed. This paper describes the use of assurance cases to help address these problems. Viewing an assessment approach in terms of an assurance case clarifies the underlying motivation for the assessment and supports more rigorous analysis. The paper also shows how the assurance case method has been used to guide the development of an assessment approach called the Cyber Resilience Review (CRR), developed for the U.S. Department of Homeland Security.
Starting Page	84
Ending Page	88
File Size	817076
Page Count	5
File Format	PDF
ISBN	9781424460472
e-ISBN	9781424460489
DOI	10.1109/THS.2010.5655090
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2010-11-08
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Context risk assessment Standards organizations critical infrastructure Organizations assurance cases Safety cyber resilience Computer security cybersecurity Resilience
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Reducing software assurance risks for security-critical and safety-critical systems

A Cyber Security Self-Assessment Method for Critical Infrastructure Protection

Studying resilient cyber incident management from large-scale cyber security training

Evaluating and improving cybersecurity capabilities of the energy critical infrastructure

A Security Argument Pattern for Medical Device Assurance Cases

Analytical Frameworks to Assess the Effectiveness and Economic-Returns of Cybersecurity Investments

Risk assessment method for cybersecurity of cyber-physical systems based on inter-dependency of vulnerabilities

Conceptual Design of a Cybersecurity Resilience Maturity Measurement (CRMM) Framework

Building the Basis for Cybersecurity and Cyber Resilience in Critical Infrastructure.

Goal-based assessment for the cybersecurity of critical infrastructure

Similar Documents

Reducing software assurance risks for security-critical and safety-critical systems

A Cyber Security Self-Assessment Method for Critical Infrastructure Protection

Studying resilient cyber incident management from large-scale cyber security training

Evaluating and improving cybersecurity capabilities of the energy critical infrastructure

A Security Argument Pattern for Medical Device Assurance Cases

Analytical Frameworks to Assess the Effectiveness and Economic-Returns of Cybersecurity Investments

Risk assessment method for cybersecurity of cyber-physical systems based on inter-dependency of vulnerabilities

Conceptual Design of a Cybersecurity Resilience Maturity Measurement (CRMM) Framework

Building the Basis for Cybersecurity and Cyber Resilience in Critical Infrastructure.

Goal-based assessment for the cybersecurity of critical infrastructure