Cyber Primer
AEWhbF
AEWhbF
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
<strong>Cyber</strong> functions<br />
levels, they protect critical networks and systems that reside in the sea, land,<br />
air and space environments. Such control is likely to be localised in terms of<br />
time and space, and will be reliant on the quality of information assurance.<br />
Control of equity in cyberspace depends on available resources and the level<br />
of risk that can be tolerated. Defensive cyber operations are enduring and<br />
non-discretionary.<br />
3.6. Security. The National Security Strategy and Strategic Defence and<br />
Security Review 2015 makes it clear that the opportunities presented by<br />
cyberspace have also introduced new vulnerabilities. Security, both<br />
individual and collective, is therefore an overarching principle in cyber<br />
operations. A lapse in security can affect our resilience, awareness and<br />
destroy the trust of our partners. The link with operations security is critical<br />
as actions in cyberspace may take place over a prolonged period and any<br />
compromise could undermine years of effort. Within the cyber environment,<br />
everyone must apply judgement, take responsibility for their actions,<br />
understand regulations and respond to possible breaches in a timely fashion.<br />
The scale of damage that even one person can cause is illustrated by the<br />
Edward Snowden case. 38<br />
3.7. Resilience. Dependence on the cyber environment dictates that<br />
Defence, commercial entities/contractors and our partners, must withstand<br />
or recover rapidly from difficult conditions. Defence must also deliver those<br />
capabilities and actions that are essential to operations.<br />
resilience<br />
The ability of the community, services or infrastructure to withstand the<br />
consequences of an incident.<br />
(JDP 02, Operations in the UK: The Defence Contribution to Resilience, 2nd<br />
Edition)<br />
cyber resilience<br />
The ability of an organisation or platform to withstand and/or recover<br />
from malicious events in cyberspace.<br />
38 More detail of which can be found at Annex 2A on page 44.<br />
<strong>Cyber</strong> <strong>Primer</strong> (2nd Edition) 55