El Departamento de Defensa present\u00f3 un nuevo marco de cinco fases para evaluar los riesgos cibern\u00e9ticos en sus redes, denominado Sistema de Gesti\u00f3n de Riesgos de Ciberseguridad, para reemplazar su antiguo sistema de gesti\u00f3n de riesgos. El anterior Marco de Gesti\u00f3n de Riesgos depend\u00eda excesivamente de listas de verificaci\u00f3n est\u00e1ticas y procesos manuales que no contemplaban las necesidades operativas ni los requisitos de cibersupervivencia.<\/p>\n
WASHINGTON \u2014 The Department of Defense unveiled a new five-phased framework for assessing cyber risks on its networks, dubbed the Cybersecurity Risk Management Construct, to replace its old risk management system.<\/p>\n
\u201cThe previous Risk Management Framework was overly reliant on static checklists and manual processes that failed to account for operational needs and cyber survivability requirements. These limitations left defense systems vulnerable to sophisticated adversaries and slowed the delivery of secure capabilities to the field,\u201d a statement from the department said. \u201cThe CSRMC addresses these gaps by shifting from \u2018snapshot in time\u2019 assessments to dynamic, automated, and continuous risk management, enabling cyber defense at the speed of relevance required for modern warfare.\u201d<\/p>\n
According to the statement, the new framework involves a five-phase lifecycle aligned to system development and operations with an additional ten foundational tenets.<\/p>\n
The five-phased lifecycle includes:<\/p>\n
Among the ten core principles, the DoD listed automation to drive efficiency; continuous monitoring and authority to operate to enable real-time situational awareness; DevSecOps to support secure and agile development; cyber survivability to enable operations in contested environments; and cybersecurity assessment to integrate threat informed testing to validate security.<\/p>\n
\u201cThis construct represents a cultural fundamental shift in how the Department approaches cybersecurity,\u201d\u00a0Katie Arrington<\/a>, who is performing the duties of the DoD chief information officer said. \u201cWith automation, continuous monitoring, and resilience at its core, the CSRMC empowers the DoW [Department of War] to defend against today\u2019s adversaries while preparing for tomorrow\u2019s challenges,\u201d she added, using the Trump administration\u2019s new moniker for the DoD.<\/p>\n