TIM-6755 V1

Office of the Director of National Intelligence (n.d.). Cyber threat framework. ODNI.
This web page provides details on the layout of the Cyber Threat Framework, including the stages, objectives, actions, and indicators used to document internal and external actions.

Office of the Director of National Intelligence (2018). Application of the Common Cyber Threat Framework. ODNI.

Office of the Director of National Intelligence (July, 2018). Application of the Common Cyber Threat Framework.
This unclassified document demonstrates the application of the cyber threat framework through the stages of preparation, engagement, presence, and effect/consequence. Specific examples of documentation and reporting are provided. Pages 27-34 highlight a case exercise for review.

Cranor, L. F. (2008). A framework for reasoning about the human in the loop. In Proceedings of the 1st Conference on Usability, Psychology, and Security (UPSEC’08). USENIX Association, USA, Article 1, 1–15.
This article details the importance of considering the “human in the loop” when approaching cybersecurity responses and planning. The author makes a case for maximizing the probability of successful security outcomes before, during, and after human interaction with the system.

Andreasson, K. J. (2011). Cybersecurity: Public sector threats and responses. Taylor & Francis Group.
Read Chapter 10 – The Civilian Cyber Incident Response Policies of the U.S. Federal Government. This chapter discusses the different policies governing responses to cyber incidents as defined by the Federal Information Security Management Act (FISMA).

Wagner, T. D., Mahbub, K., Palomar, E., & Abdallah, A. E. (2019). Cyber threat intelligence sharing: Survey and research directions. Computers & Security, 87.
This journal article discusses many aspects of cyber threat intelligence, including humans’ role, risks, benefits, sharing with industry sectors, collaboration, and more. The authors make a strong case for sharing as a mitigation strategy for ever prevalent cyberattacks.

Liu, Xiang M. (2019). The cyber acumen: An integrative framework to understand average users' decision-making processes in cybersecurity in analyzing human behavior in cyberspace. IGI Global, 192.
The chapter in the book describes the need to consider good and bad actors’ human behaviors as providing insight into the planning of and response to cybersecurity risks and threats.

Siegel, C. A., & Sweeney, M. (2020). Cyber Strategy: Risk-Driven Security and Resiliency. Auerbach Publications.
This e-book describes cybersecurity strategies using several industry-standard frameworks discussed in this class. Some of the topics detailed are cyber risks and controls, current and target statement assessments, and measuring cybersecurity plan performance. This e-book is a valuable tool to have as a reference and specific chapters are valuable resources for the weekly assignments.