A Taxonomy of Operational Cyber Security Risks
This report presents a taxonomy of operational cyber security risks that attempts to identify and organize the sources of operational cyber security risk into four classes: (1) actions of people, (2) systems and technology failures, (3) failed internal processes, and (4) external events. Each class is broken down into subclasses, which are described by their elements. This report discusses the harmonization of the taxonomy with other risk and security activities, particularly those described by the Federal Information Security Management Act (FISMA), the National Institute of Standards and Technology (NIST) Special Publications, and the CERT Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE) method.
This report is related to the following area(s) of work:
Security and SurvivabilityTechnical Note
CMU/SEI-2010-TN-028
December 2010
Cite This Report
SEI:
Cebula, James; & Young, Lisa. A Taxonomy of Operational Cyber Security Risks (CMU/SEI-2010-TN-028). Software Engineering Institute, Carnegie Mellon University, 2010. http://www.sei.cmu.edu/library/abstracts/reports/10tn028.cfm
IEEE:
J. Cebula, and L. Young, "A Taxonomy of Operational Cyber Security Risks," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Note CMU/SEI-2010-TN-028, 2010. http://www.sei.cmu.edu/library/abstracts/reports/10tn028.cfm
APA:
Cebula, J., & Young, L. (2010). A Taxonomy of Operational Cyber Security Risks (CMU/SEI-2010-TN-028). Retrieved May 25, 2013, from the Software Engineering Institute, Carnegie Mellon University website: http://www.sei.cmu.edu/library/abstracts/reports/10tn028.cfm
CHI:
Cebula, James, and Lisa Young. A Taxonomy of Operational Cyber Security Risks (CMU/SEI-2010-TN-028). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2010. http://www.sei.cmu.edu/library/abstracts/reports/10tn028.cfm
MLA:
Cebula, J., & Young, L. 2010. A Taxonomy of Operational Cyber Security Risks (Technical Report CMU/SEI-2010-TN-028). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://www.sei.cmu.edu/library/abstracts/reports/10tn028.cfm
Find Us Here
Share This Page
For more information
