Andrew Karode

Cybersecurity professionals are faced with the dilemma of selecting from a large set of cybersecurity defensive measures while operating with a limited set of resources with which to employ the measures. This report explains the menu of actions for defending an organization against cyberattack and recommends an approach for organizing the range of actions and evaluating cybersecurity defensive activities.

Authors present a framework for evaluating combat support requirements, basing posture vulnerabilities, operational resilience, and mitigation strategies to support combat operations in a denied environment. Analysts can assess combat support design vulnerabilities against attacks by near-peer or regional powers and the costs, effectiveness, and risks of alternative strategies to mitigate potential adversary anti-access/area-denial capabilities.