Engineering Trustworthy Systems: Get Cybersecurity Design Right the First Time

CHAPTER

4   Harm: Mission in Peril

Overview

•   4.1 Focus on Strategic Risks

•   4.1.1 What Is Strategic Risk?

•   4.1.2 Expected Harm

•   4.1.3 The Range of Risks

•   4.1.4 The Meaning of Focus

•   4.2 Harm Is About Mission

•   4.2.1 Elicitation of Harm

•   4.2.2 Aggregating Harm Statements

•   4.2.3 Representative Harm Lists

•   4.3 Critical Asset Inventory: Data

•   4.3.1 Data Asset Types

•   4.3.2 Data Value Spectrum

•   4.3.3 Criticality Classes

•   4.3.4 Criticality Levels

•   4.4 A Template for Exploring Mission Harm

•   4.5 Harm Is in the Eye of the Beholder

•   4.5.1 Gravity of Harm: Consensus

•   4.5.2 Drawing Conclusions

•   4.6 Sometimes Belief Is More Powerful than Truth

•   4.6.1 Destroying Value

•   4.6.2 Frustrating to Address: ...