Start With the Mission Thread

The unit of cyber resilience is the mission thread. NIST SP 800-160 describes cyber resiliency as sustaining trustworthy systems that can anticipate, withstand, recover from, and adapt to adverse cyber conditions. In practice, that means you do not start with a control list. You start with the business outcome that must continue when a cyber resource is degraded, compromised, or unavailable. Outcome before asset An asset inventory tells you what exists. A mission thread tells you what must work together for a promise to be kept. That is why the thread includes people, data, tools, third parties, timing, and decision…

Sign up free — one personalized lesson every day, matched to your role and goals.

Already have an account? Sign in