CSIAC Webinars - Security Engineering Risk Analysis (SERA): Connecting Tech Risk To Mission Impact
Channel: CSIAC
Date: 2020-04-27

https://www.csiac.org/podcast/security-engineering-risk-analysis-sera-connecting-technology-risk-to-mission-impact/

The Security Engineering Risk Analysis (SERA) Method defines a systematic approach for evaluating cybersecurity risk in highly complex networked environments. The SERA Method uses a scenario-based approach to analyze how an attacker could leverage available attack vectors and technology vulnerabilities to compromise confidentiality, integrity, and availability of mission-critical data and impact operational mission success. SERA can be applied at any point in the lifecycle to construct cyber-risk scenarios that show how the technology within a system and its context including supply chains and trusted connections in a system-of-systems provides opportunities for attackers to disrupt mission execution. Analysis of the scenarios will determine what risks are critical and which controls are important to reduce mission impact.