Designing and Bounding Cyber Effects
Match effect type, scope, duration, reversibility, observability, and risk to the mission objective.
In this lesson, you will learn to:
- Complete an effects estimate with propagation paths, controls, uncertainty, and recovery assumptions.
Designing and Bounding Cyber Effects
This lesson teaches effects as controlled state transitions in socio-technical systems, including the risk that availability, integrity, and cognition interact.
Choose effect properties deliberately
Effects include observation, exfiltration, deception, manipulation, denial, degradation, destruction, and influence. Define object, state change, scope, onset, duration, persistence, reversibility, visibility, attribution risk, and recovery. “Disrupt communications” is too vague: whose communication, which function, for how long, with what fallback, and how will success be observed?
Availability effects are visible but often recoverable. Integrity effects can undermine trust beyond the altered data. Confidentiality effects may enable future targeting or public influence. Cognitive effects depend on interpretation and audience, not only delivery. Combining them can amplify results and risk: stolen data selectively leaked during an outage may create a narrative of collapse.
Prefer the minimum effect that achieves the objective. Limit propagation, duration, privileges, and target set. Preserve rollback where compatible with purpose. Model failure states and neutral infrastructure. An operation can be technically precise at entry and indiscriminate in consequence if dependencies are misunderstood.
Estimate propagation and recovery
Build an effects tree from the initial change through services, missions, organizations, populations, and partner systems. For every branch, state probability, evidence, latency, magnitude, duration, and detection. Include feedback: operator intervention, automated failover, safety controls, public reaction, vendor action, and adversary countermeasures.
Model recovery as an adversary capability. Backups may exist but depend on identity, keys, staff, communications, and clean images. Manual operation reduces outage but may reduce capacity or safety. A public cloud migration changes geography and partner equities. Test best, expected, and worst cases; define observation and abort thresholds for each.
NotPetya demonstrates uncontrolled propagation. KA-SAT demonstrates cross-border shared-service effects. Power-grid recovery demonstrates manual resilience. These are different mechanisms and should produce different controls.
Resources
- ICRC Potential Human Cost and Cyber Operations Position — Operationally relevant treatment of interconnectivity, essential services, propagation, functionality, and humanitarian consequences.