Cybersecurity Risk Assessment and Mitigation - Revision history

Pinfold at 22:32, January 24, 2023

2023-01-24T22:32:48Z

← Older revision		Revision as of 22:32, January 24, 2023
Line 7:		Line 7:
	\|status=Implemented		\|status=Implemented
	\|website=https://drive.google.com/open?id=1CUHh-1IWhbLBrHDFak_LDMEUS3fmxyVZ Tech Jam Presentation]; [https://docs.google.com/document/d/1JR9nwfa6AShDtNaMNz-LVwOA52kZbXuA5n_QUZXOsNQ/ Project worksheet		\|website=https://drive.google.com/open?id=1CUHh-1IWhbLBrHDFak_LDMEUS3fmxyVZ Tech Jam Presentation]; [https://docs.google.com/document/d/1JR9nwfa6AShDtNaMNz-LVwOA52kZbXuA5n_QUZXOsNQ/ Project worksheet
	\|description=		\|description=Empower municipalities with cybersecurity risk assessment methodology and resources to enable timely understanding of their risk levels and appropriate mitigation against cyberrisks.
	Empower municipalities with cybersecurity risk assessment methodology and resources to enable timely understanding of their risk levels and appropriate mitigation against cyberrisks.

	The risk assessment methodology is adapted from NIST Cybersecurity Framework with a Technical Risk Rating component and an Expert Assessment. The daunting resource shortage is addressed by a unique volunteer matching mechanism based on public-private partnerships.		The risk assessment methodology is adapted from NIST Cybersecurity Framework with a Technical Risk Rating component and an Expert Assessment. The daunting resource shortage is addressed by a unique volunteer matching mechanism based on public-private partnerships.
Line 57:		Line 56:

	Tried and proven risk assessment methodology and mitigation from pilot projects in member municipalities.		Tried and proven risk assessment methodology and mitigation from pilot projects in member municipalities.
			\|chapter=Cybersecurity and Privacy Risk Management
	\|supercluster=Cybersecurity and Privacy, Wireless		\|supercluster=Cybersecurity and Privacy, Wireless
	\|year=2018		\|year=2018

Pinfold at 06:45, April 9, 2022

2022-04-09T06:45:14Z

← Older revision		Revision as of 06:45, April 9, 2022
Line 7:		Line 7:
	\|status=Implemented		\|status=Implemented
	\|website=https://drive.google.com/open?id=1CUHh-1IWhbLBrHDFak_LDMEUS3fmxyVZ Tech Jam Presentation]; [https://docs.google.com/document/d/1JR9nwfa6AShDtNaMNz-LVwOA52kZbXuA5n_QUZXOsNQ/ Project worksheet		\|website=https://drive.google.com/open?id=1CUHh-1IWhbLBrHDFak_LDMEUS3fmxyVZ Tech Jam Presentation]; [https://docs.google.com/document/d/1JR9nwfa6AShDtNaMNz-LVwOA52kZbXuA5n_QUZXOsNQ/ Project worksheet
	\|description=Empower municipalities with cybersecurity risk assessment methodology and resources to enable timely understanding of their risk levels and appropriate mitigation against cyberrisks.		\|description=
			Empower municipalities with cybersecurity risk assessment methodology and resources to enable timely understanding of their risk levels and appropriate mitigation against cyberrisks.

	The risk assessment methodology is adapted from NIST Cybersecurity Framework with a Technical Risk Rating component and an Expert Assessment. The daunting resource shortage is addressed by a unique volunteer matching mechanism based on public-private partnerships.		The risk assessment methodology is adapted from NIST Cybersecurity Framework with a Technical Risk Rating component and an Expert Assessment. The daunting resource shortage is addressed by a unique volunteer matching mechanism based on public-private partnerships.

Pinfold at 06:40, April 9, 2022

2022-04-09T06:40:21Z

Pinfold at 04:15, April 9, 2022

2022-04-09T04:15:41Z

← Older revision		Revision as of 04:15, April 9, 2022
Line 4:		Line 4:
	\|leader=Lan Jenson		\|leader=Lan Jenson
	\|imagecaption=Protected data; Happier people in your Smart City and Community.		\|imagecaption=Protected data; Happier people in your Smart City and Community.
	\|municipalities=San Mateo CA, Orange County CA, San Jose CA~~<!--; Orange County, CA USA; San Jose, CA USA-->~~		\|municipalities=San Mateo CA, Orange County CA, San Jose CA
	\|status=Implemented		\|status=Implemented
	\|website=https://drive.google.com/open?id=1CUHh-1IWhbLBrHDFak_LDMEUS3fmxyVZ Tech Jam Presentation]; [https://docs.google.com/document/d/1JR9nwfa6AShDtNaMNz-LVwOA52kZbXuA5n_QUZXOsNQ/ Project worksheet		\|website=https://drive.google.com/open?id=1CUHh-1IWhbLBrHDFak_LDMEUS3fmxyVZ Tech Jam Presentation]; [https://docs.google.com/document/d/1JR9nwfa6AShDtNaMNz-LVwOA52kZbXuA5n_QUZXOsNQ/ Project worksheet

Pinfold at 02:40, April 7, 2022

2022-04-07T02:40:08Z

← Older revision		Revision as of 02:40, April 7, 2022
Line 1:		Line 1:
	{{ActionCluster		{{ActionCluster
	\|image=ActionClusterImage.png		\|image=ActionClusterImage.png
	\|team=~~Adaptable Security Corp~~, Global Cyber Alliance, (ISC)2 Silicon Valley Chapter, EP3 Foundation, Silicon Valley Cybersecurity Alliance, Sightline Security ~~Corp~~		\|team=Cybertrust America, Global Cyber Alliance, (ISC)2 Silicon Valley Chapter, EP3 Foundation, Silicon Valley Cybersecurity Alliance, Sightline Security
	\|leader=Lan Jenson		\|leader=Lan Jenson
	\|imagecaption=Protected data; Happier people in your Smart City and Community.		\|imagecaption=Protected data; Happier people in your Smart City and Community.

Pinfold at 02:31, April 7, 2022

2022-04-07T02:31:01Z

← Older revision		Revision as of 02:31, April 7, 2022
Line 6:		Line 6:
	\|municipalities=San Mateo CA, Orange County CA, San Jose CA<!--; Orange County, CA USA; San Jose, CA USA-->		\|municipalities=San Mateo CA, Orange County CA, San Jose CA<!--; Orange County, CA USA; San Jose, CA USA-->
	\|status=Implemented		\|status=Implemented
	\|~~download~~=[https://drive.google.com/open?id=1CUHh-1IWhbLBrHDFak_LDMEUS3fmxyVZ Tech Jam Presentation]; [https://docs.google.com/document/d/1JR9nwfa6AShDtNaMNz-LVwOA52kZbXuA5n_QUZXOsNQ/ Project worksheet]		\|website=https://drive.google.com/open?id=1CUHh-1IWhbLBrHDFak_LDMEUS3fmxyVZ Tech Jam Presentation]; [https://docs.google.com/document/d/1JR9nwfa6AShDtNaMNz-LVwOA52kZbXuA5n_QUZXOsNQ/ Project worksheet
	\|description=Empower municipalities with cybersecurity risk assessment methodology and resources to enable timely understanding of their risk levels and appropriate mitigation against cyberrisks.		\|description=Empower municipalities with cybersecurity risk assessment methodology and resources to enable timely understanding of their risk levels and appropriate mitigation against cyberrisks.

Pinfold at 02:29, April 7, 2022

2022-04-07T02:29:53Z

← Older revision		Revision as of 02:29, April 7, 2022
Line 1:		Line 1:
	{{ActionCluster		{{ActionCluster
			\|image=ActionClusterImage.png
			\|team=Adaptable Security Corp, Global Cyber Alliance, (ISC)2 Silicon Valley Chapter, EP3 Foundation, Silicon Valley Cybersecurity Alliance, Sightline Security Corp
			\|leader=Lan Jenson
			\|imagecaption=Protected data; Happier people in your Smart City and Community.
			\|municipalities=San Mateo CA, Orange County CA, San Jose CA<!--; Orange County, CA USA; San Jose, CA USA-->
			\|status=Implemented
			\|download=[https://drive.google.com/open?id=1CUHh-1IWhbLBrHDFak_LDMEUS3fmxyVZ Tech Jam Presentation]; [https://docs.google.com/document/d/1JR9nwfa6AShDtNaMNz-LVwOA52kZbXuA5n_QUZXOsNQ/ Project worksheet]
			\|description=Empower municipalities with cybersecurity risk assessment methodology and resources to enable timely understanding of their risk levels and appropriate mitigation against cyberrisks.

	~~\| title = Cyber Resilience Planning (formerly Cybersecurity Risk Assessment and Mitigation)~~

	~~\| team = Adaptable Security Corp, Global Cyber Alliance, (ISC)2 Silicon Valley Chapter, EP3 Foundation, Silicon Valley Cybersecurity Alliance, Sightline Security Corp~~

			The risk assessment methodology is adapted from NIST Cybersecurity Framework with a Technical Risk Rating component and an Expert Assessment. The daunting resource shortage is addressed by a unique volunteer matching mechanism based on public-private partnerships.
	~~\| leader = Lan Jenson~~		\|challenges=Municipalities are increasingly under attacks from cyberthreats from nation states and financially motivated criminals. Most of local government CIOs consider cybersecurity a top priority in 2018.
	~~\| email = lan@adaptablesecurity.org~~
	~~\| image = ActionClusterImage.png~~

	~~\| imagecaption = Protected data; Happier people in your Smart City and Community.~~

	~~\| municipalities = San Mateo County CA, Orange County CA, San Jose CA~~
	~~<!--; Orange County, CA USA; San Jose, CA USA-->~~

	~~\| status = Implemented~~

	~~\| website =~~

	\| download = [https://drive.google.com/open?id=1CUHh-1IWhbLBrHDFak_LDMEUS3fmxyVZ Tech Jam Presentation]; [https://docs.google.com/document/d/1JR9nwfa6AShDtNaMNz-LVwOA52kZbXuA5n_QUZXOsNQ/ Project worksheet]

	\| description = Empower municipalities with cybersecurity risk assessment methodology and resources to enable timely understanding of their risk levels and appropriate mitigation against cyberrisks.



	The risk assessment methodology is adapted from NIST Cybersecurity Framework with a Technical Risk Rating component and an Expert Assessment. The daunting resource shortage is addressed by a unique volunteer matching mechanism based on public-private partnerships.



	\| challenges = Municipalities are increasingly under attacks from cyberthreats from nation states and financially motivated criminals. Most of local government CIOs consider cybersecurity a top priority in 2018.

	Municipalities are understaffed and often lack the required expertise to initiate a cohesive strategy, plan and mitigation against cyberthreats.		Municipalities are understaffed and often lack the required expertise to initiate a cohesive strategy, plan and mitigation against cyberthreats.
			\|solutions=The proposed solution addresses some of the biggest challenges by:


	\| solutions = The proposed solution addresses some of the biggest challenges by:

	* establishing a NIST-standard risk management methodology		* establishing a NIST-standard risk management methodology
Line 46:		Line 26:

	* matching experts to implement solutions pro bono or at cost		* matching experts to implement solutions pro bono or at cost
			\|requirements=Develop and assemble project team (completed)


	\| requirements = Develop and assemble project team (completed)

	Create scope and requirements, project plan (completed)		Create scope and requirements, project plan (completed)
Line 68:		Line 45:

	Identify and engage next project sites		Identify and engage next project sites
			\|kpi=Cybersecurity rating of a municipality (against baseline)
	\| kpi = Cybersecurity rating of a municipality (against baseline)

	Number of data breaches in public safety domains such as law enforcement, fire and emergency medical Services, schools, transportation		Number of data breaches in public safety domains such as law enforcement, fire and emergency medical Services, schools, transportation
			\|measurement=Measurement of cybersecurity ratings of included entities in a municipality, compared to baseline


	\| measurement = Measurement of cybersecurity ratings of included entities in a municipality, compared to baseline

	Measurement of data breach count over 6 months period, compared to baseline		Measurement of data breach count over 6 months period, compared to baseline
			\|standards=Uses the widely adopted NIST Cybersecurity Framework (NIST CSF)
			\|cybersecurity=The web based applications used to provide near real time cybersecurity ratings to member municipalities and to match volunteers with member municipalities will be secured using SSL Certificates employing Extended Validation.
			\|impacts=Reducing economic losses of governments and smaller businesses to cybercrime and fostering economic diversity of all businesses
	\| standards = Uses the widely adopted NIST Cybersecurity Framework (NIST CSF)


	\| replicability = Standardized processes are not unique to city or region and can be replicated and scaled up in multiple cities/communities. The solution is planned to be replicated in 2 more cities in the US.



	~~The system will have its own business model to create sustainable revenue stream.~~

	\| cybersecurity = The web based applications used to provide near real time cybersecurity ratings to member municipalities and to match volunteers with member municipalities will be secured using SSL Certificates employing Extended Validation.



	\| impacts = Reducing economic losses of governments and smaller businesses to cybercrime and fostering economic diversity of all businesses

	Improving quality of life for municipality officials and residents thanks to reduced cybercrime and privacy concerns		Improving quality of life for municipality officials and residents thanks to reduced cybercrime and privacy concerns

	Fostering a culture of security by shrinking the skills gap in cybersecurity and privacy		Fostering a culture of security by shrinking the skills gap in cybersecurity and privacy
			\|demonstration=Web-based application to give technical cybersecurity ratings near real-time available in member municipalities;


	\| demonstration = Web-based application to give technical cybersecurity ratings near real-time available in member municipalities;

	Web-based platform to match volunteers with member municipalities real needs;		Web-based platform to match volunteers with member municipalities real needs;

	Tried and proven risk assessment methodology and mitigation from pilot projects in member municipalities.		Tried and proven risk assessment methodology and mitigation from pilot projects in member municipalities.
			\|supercluster=Cybersecurity and Privacy, Wireless
			\|year=2018
			\|title=Cyber Resilience Planning (formerly Cybersecurity Risk Assessment and Mitigation)
			\|email=lan@adaptablesecurity.org
			\|replicability=Standardized processes are not unique to city or region and can be replicated and scaled up in multiple cities/communities. The solution is planned to be replicated in 2 more cities in the US.



	~~\| supercluster = Wireless~~		The system will have its own business model to create sustainable revenue stream.

	~~\| year = 2018~~

	}}		}}

	~~[[Category:Cybersecurity and Privacy]]~~

Pinfold at 19:33, March 12, 2022

2022-03-12T19:33:04Z

← Older revision		Revision as of 19:33, March 12, 2022
Line 12:		Line 12:
	\| imagecaption = Protected data; Happier people in your Smart City and Community.		\| imagecaption = Protected data; Happier people in your Smart City and Community.

	\| municipalities = San Mateo County, CA ~~USA~~		\| municipalities = San Mateo County CA, Orange County CA, San Jose CA
	<!--; Orange County, CA USA; San Jose, CA USA-->		<!--; Orange County, CA USA; San Jose, CA USA-->

Pinfold: 1 revision imported

2021-10-31T20:44:40Z

1 revision imported

← Older revision	Revision as of 20:44, October 31, 2021
(No difference)

en>Ocadmin at 05:13, March 23, 2020

2020-03-23T05:13:49Z

New page

{{ActionCluster

| title = Cyber Resilience Planning (formerly Cybersecurity Risk Assessment and Mitigation)

| team = Adaptable Security Corp, Global Cyber Alliance, (ISC)2 Silicon Valley Chapter, EP3 Foundation, Silicon Valley Cybersecurity Alliance, Sightline Security Corp

| leader = Lan Jenson
| email = lan@adaptablesecurity.org
| image = ActionClusterImage.png

| imagecaption = Protected data; Happier people in your Smart City and Community.

| municipalities = San Mateo County, CA USA


| status = Implemented

| website =

| download = [https://drive.google.com/open?id=1CUHh-1IWhbLBrHDFak_LDMEUS3fmxyVZ Tech Jam Presentation]; [https://docs.google.com/document/d/1JR9nwfa6AShDtNaMNz-LVwOA52kZbXuA5n_QUZXOsNQ/ Project worksheet]

| description = Empower municipalities with cybersecurity risk assessment methodology and resources to enable timely understanding of their risk levels and appropriate mitigation against cyberrisks.

The risk assessment methodology is adapted from NIST Cybersecurity Framework with a Technical Risk Rating component and an Expert Assessment. The daunting resource shortage is addressed by a unique volunteer matching mechanism based on public-private partnerships.

| challenges = Municipalities are increasingly under attacks from cyberthreats from nation states and financially motivated criminals. Most of local government CIOs consider cybersecurity a top priority in 2018.

Municipalities are understaffed and often lack the required expertise to initiate a cohesive strategy, plan and mitigation against cyberthreats.

| solutions = The proposed solution addresses some of the biggest challenges by:

* establishing a NIST-standard risk management methodology

* identifying funding models for public institutions applicable

* providing free security rating technology

* providing free technologies to defend against most common vulnerabilities (email-validating DMARC and privacy preserving and secure DNS solution)

* matching experts to implement solutions pro bono or at cost

| requirements = Develop and assemble project team (completed)

Create scope and requirements, project plan (completed)

Develop system architecture (completed)

Create application development team (completed)

Identify a pilot program; design and roll out pilot (pilots identified)

Gain stakeholder support and buy-in from the community

Run pilot for three months

Summarize best practices and lessons learned and publish if applicable

Identify and engage next project sites

| kpi = Cybersecurity rating of a municipality (against baseline)

Number of data breaches in public safety domains such as law enforcement, fire and emergency medical Services, schools, transportation

| measurement = Measurement of cybersecurity ratings of included entities in a municipality, compared to baseline

Measurement of data breach count over 6 months period, compared to baseline

| standards = Uses the widely adopted NIST Cybersecurity Framework (NIST CSF)

| replicability = Standardized processes are not unique to city or region and can be replicated and scaled up in multiple cities/communities. The solution is planned to be replicated in 2 more cities in the US.

The system will have its own business model to create sustainable revenue stream.

| cybersecurity = The web based applications used to provide near real time cybersecurity ratings to member municipalities and to match volunteers with member municipalities will be secured using SSL Certificates employing Extended Validation.

| impacts = Reducing economic losses of governments and smaller businesses to cybercrime and fostering economic diversity of all businesses

Improving quality of life for municipality officials and residents thanks to reduced cybercrime and privacy concerns

Fostering a culture of security by shrinking the skills gap in cybersecurity and privacy

| demonstration = Web-based application to give technical cybersecurity ratings near real-time available in member municipalities;

Web-based platform to match volunteers with member municipalities real needs;

Tried and proven risk assessment methodology and mitigation from pilot projects in member municipalities.

| supercluster = Wireless

| year = 2018

}}

[[Category:Cybersecurity and Privacy]]

← Older revision		Revision as of 06:40, April 9, 2022
Line 7:		Line 7:
	\|status=Implemented		\|status=Implemented
	\|website=https://drive.google.com/open?id=1CUHh-1IWhbLBrHDFak_LDMEUS3fmxyVZ Tech Jam Presentation]; [https://docs.google.com/document/d/1JR9nwfa6AShDtNaMNz-LVwOA52kZbXuA5n_QUZXOsNQ/ Project worksheet		\|website=https://drive.google.com/open?id=1CUHh-1IWhbLBrHDFak_LDMEUS3fmxyVZ Tech Jam Presentation]; [https://docs.google.com/document/d/1JR9nwfa6AShDtNaMNz-LVwOA52kZbXuA5n_QUZXOsNQ/ Project worksheet
	\|description=Empower municipalities with cybersecurity risk assessment methodology and resources to enable timely understanding of their risk levels and appropriate mitigation against cyberrisks.		\|description=Empower municipalities with cybersecurity risk assessment methodology and resources to enable timely understanding of their risk levels and appropriate mitigation against cyberrisks.



	The risk assessment methodology is adapted from NIST Cybersecurity Framework with a Technical Risk Rating component and an Expert Assessment. The daunting resource shortage is addressed by a unique volunteer matching mechanism based on public-private partnerships.		The risk assessment methodology is adapted from NIST Cybersecurity Framework with a Technical Risk Rating component and an Expert Assessment. The daunting resource shortage is addressed by a unique volunteer matching mechanism based on public-private partnerships.
Line 16:		Line 14:
	Municipalities are understaffed and often lack the required expertise to initiate a cohesive strategy, plan and mitigation against cyberthreats.		Municipalities are understaffed and often lack the required expertise to initiate a cohesive strategy, plan and mitigation against cyberthreats.
	\|solutions=The proposed solution addresses some of the biggest challenges by:		\|solutions=The proposed solution addresses some of the biggest challenges by:

	* establishing a NIST-standard risk management methodology		* establishing a NIST-standard risk management methodology

	* identifying funding models for public institutions applicable		* identifying funding models for public institutions applicable

	* providing free security rating technology		* providing free security rating technology

	* providing free technologies to defend against most common vulnerabilities (email-validating DMARC and privacy preserving and secure DNS solution)		* providing free technologies to defend against most common vulnerabilities (email-validating DMARC and privacy preserving and secure DNS solution)

	* matching experts to implement solutions pro bono or at cost		* matching experts to implement solutions pro bono or at cost
	\|requirements=Develop and assemble project team (completed)		\|requirements=Develop and assemble project team (completed)