“U.S. weapon and space systems must be secure and resilient. Analyzing cyber risks to missions can enable system owners and operators to effectively and cost efficiently mitigate these risks to the greatest extent possible. In addition, acquisition programs need to research how they might apply zero trust principles to outpace emerging threats.”
Booz Allen's Approach
While there are existing processes to assess and authorize weapon and space systems for operation, these processes alone are not sufficient to characterize and address the threats to missions posed by a nation-state cyber adversary. In addition to a Risk Management Framework (RMF) process, programs need a more robust risk assessment regime that focuses on potential attack paths, threats, and how a cyber effect could degrade or disrupt mission capabilities. Our mission-based cyber risk assessments bring together program officials, developers, operators, and defenders to identify risks and prioritize mitigation and monitoring to improve cyber survivability and ensure mission success.
Booz Allen stands ready to help strengthen cybersecurity for critical programs and missions. We help DOD and the IC:
- Identify mission risks through threat-informed mission-based cyber risk assessments of systems at every phase of the weapon and space systems lifecycle
- Identify threats by applying a deep understanding of adversary threat systems and tactics, techniques, and procedures (TTP) through MBCRAs and Cyber Table Top exercises
- Demonstrate the vulnerabilities, impacts, and mitigations using cyber digital twins, cyber-physical test beds, and wargaming
- Detect cyberattacks with cutting-edge data bus monitoring capabilities
- Prioritize and remediate mission-relevant vulnerabilities to improve mission success
- Conduct cutting-edge research in resilient architectures, technologies, and zero trust (ZT)
Zero Trust for Weapon and Space Systems
DOD is determining how zero trust will be implemented when it comes to weapon and space programs. Cyber assessments of military exercises have shown zero trust principles can help protect critical DOD missions. Applying the ZT principles to weapon systems can be particularly challenging. Booz Allen has developed a process that takes into account these complex mission and operational technology challenges. Organizations required to implement zero trust can utilize our maturity assessment process to gain valuable insights, establish objectives, and move ahead by applying tailored ZT solutions.
