About the Program
The National Cybersecurity Center (NCC) created an assessment initiative tailored for state, local, tribal & territorial (SLTT) organizations. This program aims to accurately assess the operational fallout of cyberattacks and facilitate informed security investment decisions for critical functions.
Methodology
Employing a meticulously developed methodology by MITRE, the program utilizes the Crown Jewels Analysis framework. By assessing dependencies and conducting Mission Impact Analysis, this framework identifies and prioritizes critical cyber assets.
Operational Insight: Recognizing the necessity for heightened awareness of cyber-attack implications, particularly in the context of constrained budgets, the program endeavors to equip organizations with the capability for effective business continuity planning and operational resilience.
Holistic Approach: Emphasizing the inadequacy of existing assessments, which often center solely on IT concerns, the program seeks to provide a holistic understanding of cyber-attack impacts on entire organizations setups, working with each department individually.
“NCC has successfully completed a comprehensive cyber assessment for our local Colorado jurisdiction. This thorough evaluation encompassed identifying the cyber assets that are mission-critical to our success. Allowing our team to have confidence we are focusing on the correct assets to enhance our security posture. The NCC’s meticulous approach ensured a seamless process, and the actionable insights provided have been invaluable to our team.”
—Robert Losinki and James Lucchesi, Denver Public Schools
Deliverables
Impact Analysis
Evaluation of asset failure impacts on organizational mission objectives and department-specific critical tasks.
Critical Asset List
Compilation of top priority assets necessitating protection based on criticality and impact analyses.
Dependency Maps
Insightful analysis of asset dependencies through Dependency Maps, which visualize key operational interconnections within an organization.
Tabletop Exercises
Practical simulations based on impact analysis scenarios to enhance preparedness and response capabilities.
