Cybersecurity Science with Shawn Riley

In the realm of information security, Asset Management, Risk-Based Vulnerability Management, Continuous Threat Exposure Management, and Risk Management are interconnected concepts that together form a comprehensive approach to securing an organization's information assets. Here's a breakdown of their relationship: Asset Management: Definition : Asset Management involves identifying, classifying, and prioritizing an organization's assets. This includes tangible assets like hardware and intangible assets like software, data, and intellectual property. Relationship : Before you can protect something, you need to know what it is, where it is, and its value to the organization. Asset Management provides the foundation for all other security processes by identifying what needs to be protected. Focus : Assets Risk-Based Vulnerability Management: Definition : This is the process of identifying, evaluating, treating, and reporting on security vulnerabilities in systems in the contex...

I. Introduction In the modern digital landscape, cybersecurity has become an essential concern for organizations across all sectors. The increasing sophistication of cyber threats necessitates robust and effective cybersecurity strategies. One such strategy is the Continuous Threat Exposure Management (CTEM) program. CTEM is a proactive, dynamic approach to cybersecurity that emphasizes the continuous identification, assessment, and mitigation of cyber threats. It underscores the need for ongoing vigilance and adaptation to an ever-evolving threat landscape. A critical component of CTEM programs is the understanding and application of a specific effects vocabulary. This vocabulary, as outlined in the NIST 800-160 vol 2 rev 1, provides a standardized language for cybersecurity professionals to articulate and evaluate the impact of their decisions on cyber adversaries. It consists of five high-level, desired effects on the adversary: redirect, preclude, impede, limit, and expose, and 14 ...

Introduction Cybersecurity science is a systematic approach to understanding, predicting, and managing cybersecurity risks. It encompasses a wide range of topics and methodologies, which are organized into seven core themes. In this article, we will dive into these themes, explore their interrelatedness, and discuss their importance to Chief Information Security Officers (CISOs) seeking to implement comprehensive security programs. Common Language The foundation of cybersecurity science lies in the establishment of a common language. This enables security professionals, including CISOs, to communicate effectively about security concepts, architectural components, and risk assessment results. A common language provides consistency and clarity, ensuring that all stakeholders have a shared understanding of the goals and challenges of a security program. Key aspects of a common language include: Terminology : Accurate and consistent definitions of security concepts. Visualization : Clear r...