Cyber Risk Tooling - Design Phase

Summary of work: Designing of a tool base that ingests and Analyses all cyber risk data, aligned with the Joint User vision.

Production of a Stakeholder Map.

Understand User Requirements/available data.

Analysis of existing capability.

Creation of costed options for the Development Phase.

Outline of Skills and experience required for the next phase.

The Cyber Risk Management Function (part of the MOD's Cyber Security Operations Capability (CSOC)) requires a set of tools that will allow for automation of the ingestion, storage, analysis and exploitation of Cyber risks, and informing data, to keep pace with the increasing level of cyber risks being discovered. The Cyber Risk tooling capability is required by September 2019 to fall in line with programme expansion and roll out. This Design Phase is to scope what can be delivered by this deadline.

Additional support is required to fulfil the Design Phase of the project, ensuring that an appropriate solution is defined that will offer a stable foundation and scalable configuration for the growing cyber risk management capability, while providing immediate benefit to users. The foundations will allow for the ingest of all cyber risk-related data such as threats, vulnerabilities, cyber events and incidents data. This will also permit rapid broadening of the data import, analytics and data exploitation capabilities, which will allow the MOD to understand its cyber risk exposure and the prioritised risks that need treatment.

Ministry of Defence - primarily the Cyber Risk Management Team in C4ISR & Cyber Joint User and the Defence Assurance and Information Security (DAIS) team, with growth across the MOD in time.

The user's need includes a design for an automated method of ingesting, storing and analysing of Cyber Risks based on an existing big data platform.