Cyber Defense Matrix - Cyber City Map

# Cyber Defense Matrix The [Cyber Defense Matrix](https://cyberdefensematrix.com/) (TM) is a book about how to orient controls to increase the overall effectiveness and resilience of cybersecurity in an environment from the lens of protecting asset classes. The method for analyzing controls is devised into a matrix that can then be oriented for reviews and strategy. Asset classes are provided down the left side of the matrix and classes of security domains across the top for a matrix view of different aspects of controls and defenses. ## Cyber City Map x Cyber Defense Matrix | | Identify | Protect | Detect | Respond | Recover | | ------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------- | | | Inventorying assets and vulns, measuring attack surface, prioritizing, baselining normal, threat modeling, risk assessment | Preventing or limiting impact, patching, containing, isolating, hardening, managing access, vuln mitigation | Discovering events, triggering on anomalies, hunting for intrusions, security analytics | Acting on events, eradicating intrusion, assessing damage, forensic reconstruction | Returning to normal operations, restoring services, documenting lessons learned, resiliency | | **Network** Connections and traffic flowing among devices and apps, communication paths | [[Asset Management]] [[Attack Surface Enumeration]] [[Defense Modeling]] [[Domain Management]] [[Exploit Management]] [[Network Management]] [[Persona Management]] | [[Allow Listing]] [[Deny Listing]] [[Domain Management]] [[Network Management]] [[Remediation Management]] [[Third Party Management]] | [[Alert Correlation]] [[Deception Management]] [[Domain Management]] [[Log Management]] [[Network Management]] [[Stream Processing]] | [[Domain Management]] [[Forensic Analysis]] [[Incident Management]] [[Network Management]] | [[Backup and Recovery]] [[Domain Management]] [[Failure Tracing]] [[Network Management]] | | **Systems** Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, etc. | [[Asset Management]] [[Attack Surface Enumeration]] [[Defense Modeling]] [[Device Management]] [[Exploit Management]] [[Persona Management]] | [[Allow Listing]] [[Deny Listing]] [[Device Management]] [[Remediation Management]] [[Third Party Management]] | [[Alert Correlation]] [[Deception Management]] [[Device Management]] [[Log Management]] [[Stream Processing]] | [[Device Management]] [[Forensic Analysis]] [[Incident Management]] | [[Backup and Recovery]] [[Device Management]] [[Failure Tracing]] | | **Applications** Software, interactions, and application flows on the devices | [[Application Management]] [[Asset Management]] [[Attack Surface Enumeration]] [[Code Management]] [[Defense Modeling]] [[Email Management]] [[Exploit Management]] [[Persona Management]] [[Third Party Management]] | [[Allow Listing]] [[Application Management]] [[Deny Listing]] [[Email Management]] [[Code Management]] [[Remediation Management]] [[Third Party Management]] | [[Alert Correlation]] [[Application Management]] [[Deception Management]] [[Email Management]] [[Log Management]] [[Stream Processing]] [[Third Party Management]] | [[Application Management]] [[Email Management]] [[Forensic Analysis]] [[Incident Management]] [[Third Party Management]] | [[Application Management]] [[Backup and Recovery]] [[Email Management]] [[Failure Tracing]] [[Third Party Management]] | | **Data** Content at rest, in transit, or in use by the resources listed | [[Asset Management]] [[Attack Surface Enumeration]] [[Data Management]] [[Defense Modeling]] [[Exploit Management]] [[Persona Management]] | [[Allow Listing]] [[Data Management]] [[Deny Listing]] [[Remediation Management]] [[Third Party Management]] | [[Alert Correlation]] [[Data Management]] [[Deception Management]] [[Log Management]] [[Stream Processing]] | [[Data Management]] [[Forensic Analysis]] [[Incident Management]] | [[Backup and Recovery]] [[Data Management]] [[Failure Tracing]] | | **Identity** The people using the resources listed | [[Asset Management]] [[Attack Surface Enumeration]] [[Defense Modeling]] [[Exploit Management]] [[Identity and Access Management]] [[Persona Management]] [[Third Party Management]] [[Training]] | [[Allow Listing]] [[Deny Listing]] [[Identity and Access Management]] [[Remediation Management]] [[Third Party Management]] [[Training]] | [[Alert Correlation]] [[Deception Management]] [[Identity and Access Management]] [[Log Management]] [[Stream Processing]] [[Third Party Management]] [[Training]] | [[Forensic Analysis]] [[Identity and Access Management]] [[Incident Management]] [[Third Party Management]] [[Training]] | [[Backup and Recovery]] [[Failure Tracing]] [[Identity and Access Management]] [[Third Party Management]] [[Training]] | ## Inspiration & Resources + [Cyber Defense Matrix](https://cyberdefensematrix.com/) + [Cybersecurity Maturity Matrix (cybermaturitymatrix.com)](https://cybermaturitymatrix.com/?annotate=false&preset=cdm) ## Release Notes + [[WIP - Q3 2024 Release#Map Cyber Defense Matrix to Cybersecurity Capabilities]] ## [Cyber City Map](https://cybercitymap.com/) © 2023-2024 by [ThirdScore, Inc.](https://thirdscore.com/) All Rights Reserved.