Cyber Resiliency Metrics and Scoring in Practice—Use Case Methodology and Examples

Cyber resiliency analysis and metrics are sensitive to a wide variety of assumptions about the operational, programmatic, architectural, and threat environments in which alternative solutions are identified and considered. The effective application of analytic methods, scoring, and metrics can be illustrated via use cases or notional worked examples. A cyber resiliency use case enables clear exposition of the problems, trade-offs, and metrics identified as part of a cyber resiliency analysis. This report presents the methodology—framework and process—for creating cyber resiliency use cases that was developed under the Measuring the Effectiveness of Cyber Resiliency research project. This work illustrates elements of the framework for a variety of possible use cases and presents the Vehicle Use Case in detail.