Alignment to Business and Mission Objectives

Common Manufacturing Business/Mission Objectives

OPERATIONALIZING CYBER RESILIENCE

Manufacturing innovation has two aspects to speed:  the rate at which companies develop new products and services, and the rate at which those products and services are delivered to market, all dependent upon cyber resilience.

Five common Manufacturing Business/Mission Objectives provide the necessary context for identifying and managing cybersecurity risk mitigation efforts for the Manufacturing Sector. Other business/mission objectives also need to be addressed, but the following five core objectives map to key cybersecurity practices that support each objective, allowing the Manufacturing Sector to better prioritize actions and resources according to each individual organization’s and each individual user’s defined needs.

“Maintaining Human Safety, Environmental Safety, Product Quality, Production Goals and Trade Secrets” support each objective, allowing Manufacturers to focus on implementing cybersecurity measures against threats that could severely compromise their ability to perform the organization’s essential mission.

 1.  Maintain Human Safety
Manage cybersecurity risks that could potentially impact human safety. Cybersecurity implementations on the manufacturing system could potentially adversely affect human safety. Personnel must be trained on cybersecurity and safety interdependencies.

2.  Maintain Environmental Safety
Manage cybersecurity risks that could adversely affect the environment, including both accidental and deliberate damage. Cybersecurity risk to manufacturing systems could potentially adversely affect environmental safety. Personnel must be trained to understand cybersecurity and environmental safety interdependencies – aligned to physical response protocols.

3.  Maintain Product Quality
Manage cybersecurity risks that could adversely affect the quality of products. Protect against compromise of integrity and confidentiality of product data.

4.  Maintain Production Goals
Manage cybersecurity risks that could adversely affect product goals. Cybersecurity risk on manufacturing systems could potentially adversely affect production goals. Personnel must be trained to understand cybersecurity and production goal interdependencies.

5.  Maintain Trade Secrets
Manage cybersecurity risks that could lead to the loss or compromise of the organization’s intellectual property and sensitive business data.

ALIGNMENT OF CYBERSECURITY GOALS TO BUSINESS SUCCESS

To align cybersecurity goals with overall mission success, for each of the above Manufacturing Business/Mission Objectives, there are sub-categories for each Function  to achieve cyber resilience (refer to “Functions” column).

This allows the manufacturer to focus on implementing cybersecurity measures against threats that could severely compromise their ability to perform the organization’s essential mission.

CORE OBJECTIVES

Maintain Human Safety
Maintain Environmental Safety
Maintain Quality of Product
Maintain Production Goals
Maintain Trade Secrets

FUNCTIONS

Identify – Cyber Risks

Asset Management

Business Environment

Governance

Risk Assessment

Risk Management Strategy

Protect – Limit Cyber Impacts

Access Control

Awareness and Training

Data Security

Information Protection Processes and Procedures

Maintenance

Protective Technology

Detect – Discover Cyber Events

Anomalies and Events

Security Continuous Monitoring

Detection Processes

Respond – Contain Event Impact

Response Planning

Communications

Analysis

Mitigation

Improvements

Recover – To Normal Operations

Recovery Planning

Improvements

Communications