Selection of Cybersecurity Safequards Portfolio

Abstract

Nowadays information technology (IT) becomes one of the core elements of global supply chains that are increasingly at risk of a disruption of their information systems.

Problems

11.1

Design attack scenarios for correlated threat events.

11.2

Enhance the SMIP models presented in this chapter for multiple implementation levels of countermeasures, where different levels are associated with different implementation costs and different effectiveness of blocking different threats.

11.3

Modify the SMIP models presented in this chapter for selection of cybersecurity portfolio such that cannot contain mutually exclusive countermeasures or such that must contain subsets of countermeasures contingent on each other.

11.4

Relax the assumption that the blocking effectiveness of each countermeasure is independent whether or not it is used alone or together with other countermeasures. What would be the implication of that relaxation on the developed models?

11.5

Identify the best-case and the worst-case attack scenarios such that the CVaR of loss is not greater and not less than than a fixed threshold loss, respectively.