Cyber defense

GUÍA DE
CIBERDEFENSA
ORIENTACIONES PARA EL DISEÑO, PLANEAMIENTO, IMPLANTACIÓN Y DESARROLLO DE UNA CIBERDEFENSA MILITAR
53 Knowledge management is a capability that is based on two areas functional and technical. The functional area is the fundamental and most complex because it requires a personalized approach, and procedures adapted to the unit’s particularities and needs while the technical area can be solved with widespread commercial tools and procedures.
317.
The KM functional area focuses on the needs assessment for exchange and access to information by all the cyber force units, the design of the information flow map, the development of procedures and rules for access to information, the evaluation of the effectiveness of procedures and tools, and the monitoring of compliance with standards.
318.
The KM technical area focuses on identifying, testing, implementing, administering and sustaining the appropriate information management and information exchange tools for the effective performance of all the cyber force tasks and activities. Typically, this area is buttressed by the cyber force technical support branch.
319.
Knowledge management is a discipline of such influence on the cyber force operation and of such complexity that it is necessary to establish a specific responsible branch, with special qualifications, and exclusive dedication, within general staff (thus highlighting its functional nature over the technical).
320.
Knowledge management comprises four main groups of activities internal information management, management of information exchange with external entities, preparation and updating of a catalog of experts, and preparation and updating of a critical service catalog.
321.

Internal information management includes the design, development, implementation, administration and maintenance of the cyber situational awareness (CSA), internal databases, think-tanks and platforms for the exchange of information, vulnerabilities and threats (MISP); differentiating classified, unclassified and public information.
322.
External information management includes the information exchange with the cyber force partners (other armed forces units, other MoD branches, public entities, industry, academia, citizens, cybers forces of other nations, international military alliances, international cybersecurity organizations, etc) and the management of the public communication strategy.
323.
The cataloging of experts is an activity aimed at the identification and classification of people and companies especially qualified in an area of knowledge or technologies of special interest and criticality for the cyber force. The catalog of experts must be updated periodically and it must include emerging areas of knowledge and technologies, new experts and new contact details. This activity is closely associated with cyber reserve management.
324.
The cataloging of critical services is an activity aimed at identifying and classifying critical information systems and services for the operation of the cyber force in accordance with the criteria established by the commander for this purpose. This activity is closely associated with the management of the operations continuity plan.
325.
Knowledge management is an essential capability of the cyberspace force, but due attention is often not paid to it. Therefore, it is very important that the cyber force commander explicitly highlight its importance and need (the functional area in particular) and establish the mechanisms and resources necessary for its design, development, implementation and sustainability in the cyber force development plan.

GUÍA DE

Download 2.54 Mb.

Share with your friends: