Resilience

Resilience

importance 1

which system services are the most critical for a business?

importance 2

how might these services be compromised?

importance 3

what is the minimal quality of service that must be maintained?

importance 4

how can these services be protected?

importance 5

if a service becomes unavailable, how quickly can it be recovered?

strategy 1

resistance - avoiding problems by building capabilities into the system to resist attacks

strategy 2

recognition - detecting problems by building capabilities into the system to detect attacks and failures and assess the resultant damage

strategy 3

recovery - tolerating problems by building capabilities into the system to deliver services whilst under attack

key activity 1

system understanding - review goals, requirements and architecture

key activity 2

critical service identification - identify services that must be maintained

key activity 3

attack simulation - devise attack scenarios and identify components affected

key activity 4

resilience analysis - identify resilience strategies to be applied