Кибер разузнаване - оперативно ниво за действие

INTELLIGENCE AND NATIONAL SECURITY ALLIANCE CYBER INTELLIGENCE (INSA) TASK FORCE - USA

OCTOBER 2014
 www.insaonline.org | 703.224.4672

OPERATIONAL CYBER INTELLIGENCE

THE THIRD WHITE PAPER IN THE “LEVELS OF CYBER INTELLIGENCE” SERIES 

While much attention has been paid to cyber attacks against organizations of all sizes and from across all sectors, there has been less discussion of how organizations can strengthen their risk management processes in such a diverse and evolving threat climate. Operational cyber intelligence encompasses an understanding of both tactical means – how cyber threats function to disrupt and/or degrade an organization’s networks and cyber capabilities – and the broader strategic motivations of potential adversaries. This intelligence can inform senior leadership and help executives and managers develop strategic plans and policies that allow an organization to operate while navigating countless cyber threats. 
Specifically, this white paper examines: 

• How operational cyber intelligence seeks to protect the enterprise by facilitating predictive analysis and a more comprehensive understanding of specific threats;
 • Business and mission considerations for operational cyber intelligence; and 
• Workforce and skill sets necessary to support the cyber intelligence role. 

While tactical cyber intelligence is directed at efforts to detect and respond to adversaries already operating within an organization’s network, operational cyber intelligence protects the enterprise by facilitating predictive analysis of specific threat actors before they gain access. The ultimate goal of a cyber intelligence program is to reduce risk to an organization’s critical information, intellectual property and ability to successfully conduct its mission. 

Operational cyber intelligence does this by: 
1. Defining the operating environment.
2. Describing the impact of the operating environment. 
3. Evaluating the adversary. 
4. Determining adversaries’ potential courses of action. 

Operational cyber intelligence provides a thread that links the probability and impact of a cyber attack with its strategic-level implications. The result is a coherent framework for analysis and prioritization of potential threats and vulnerabilities given an organization’s threat environment. 

Operational Cyber Intelligence is the third in the INSA white paper series on levels of cyber intelligence. The series began with the overview paper, Operational Levels of Cyber Intelligence, in September 2013, followed by Strategic Cyber Intelligence in March 2014. The next installment on tactical cyber intelligence will be published in early 2015.

Връзка за достъп до целия документ:
http://www.insaonline.org/i/d/a/Resources/OCI_wp.aspx