DOCTRINE
System defense model
Protection of critical functions through distribution, alternatives, adaptive governance and recovery.
Function before asset
A single critical function may depend on many physical assets, people, communications channels, energy sources and procedures. Resilience therefore grows not only by strengthening one element, but also by reducing dependence on it.
Five layers
- define the function;
- map dependencies;
- identify single points of failure;
- create redundancy and alternative modes;
- verify actual recovery.