An Adversarial Viewpoint To Identify High Value Targets For Increased Cyber Resilience

Author: Francesco Chiarini

Co-Author: Calin Gheorghiu

This paper proposes a qualitative and quantitative methodology to significantly increase an organization's cyber resilience posture against common and advanced adversaries by accounting for the value that these threat actors place on a given asset instead of solely focusing on the asset's value from a business criticality or informational value perspective.

In order to maximise its applicability, the High Value Target methodology is meant to be integrated with existing publications such as Special Publication NIST 800-160, MITRE Cyber Resiliency Engineering Framework and tied to the MITRE ATT&CK Framework.