Consequence-driven Cyber-informed Engineering (CCE)

That's a long title...

Consequence-driven Cyber-informed Engineering (CCE) is an advanced methodology designed to protect critical infrastructure.

Consequence-driven Cyber-informed Engineering (CCE)Idaho National Laboratory

Developed by Idaho National Laboratory, CCE operates on the premise that determined adversaries can and will penetrate targeted networks.

Think like a hacker, but act like an engineer - ICS-CERT

By adopting 'think like the adversary' mindset, this approach equips CNI owners and operators with a comprehensive four-phase process to secure their essential operations against sophisticated cyber threats.

CCS Process, from https://inl.gov/national-security/cce/

Security Operational Technology

As organisations adopt new technologies, the risk exposure grows. CCE considers the security of critical operations and processes, not just technology. CCE evaluates vulnerabilities in the context of the entire organisation, ensuring comprehensive protection.