topic Re: Seeking a Template for a Cybersecurity Program Organizational CONOPS Document in Tech Talk

Seeking a Template for a Cybersecurity Program Organizational CONOPS Document

Deckard — Mon, 08 Jan 2018 19:24:50 GMT

I am helping with a high level Cybersec Organization CONOPS document, and I would appreciate any leads to a template or other Word document that would be helpful.

Re: Seeking a Template for a Cybersecurity Program Organizational CONOPS Document

Clive — Mon, 08 Jan 2018 20:19:17 GMT

Although not for security I was impressed by the document the University of Alabama IT department published.

It got the right conversations started

https://www.uab.edu/it/home/strategic-plan

Re: Seeking a Template for a Cybersecurity Program Organizational CONOPS Document

ClayBoswell — Mon, 08 Jan 2018 22:06:47 GMT

The link provided by Clive had a space at end - kept me from accessing the document directly.

If you have trouble try to use: https://www.uab.edu/it/home/strategic-plan

Re: Seeking a Template for a Cybersecurity Program Organizational CONOPS Document

j_M007 — Tue, 09 Jan 2018 17:20:49 GMT

Hi Deckard,

What about the NIST Cybersecurity Framework? Pardon if I missed something there, but the NIST documentation set is complete. This is the link to check it out. https://www.nist.gov/cyberframework

In SP 800-53, CONOPS as a control is mentioned in PL-7

https://nvd.nist.gov/800-53/Rev4/control/PL-7

I don't know if there is a formalized methodology, so I suppose at a minimum a statement of how the system is to be operated would work. (However, if you don't think it's too much, maybe an Executive Summary style would work - Who, what, where, when, why, how. But just KISS it.)

Best regards!

Re: Seeking a Template for a Cybersecurity Program Organizational CONOPS Document

Deckard — Tue, 09 Jan 2018 18:57:16 GMT

Thank you, Clive and Clay for the useful input. As far as PL-7 goes, that is a requirement for the CONOPS of a system. It doesn't present much practical guidance for the content of such a document, and it is not concerned with the Concept of Operations of an OU such as a Cybersecurity Program.

Re: Seeking a Template for a Cybersecurity Program Organizational CONOPS Document

tavilucea — Thu, 08 Feb 2018 14:13:33 GMT

This is not really a template but I use this as a guide when a brief senior managers or train new people.

Risk Management Framework is my world...since i work in the Government realm.

https://www.dau.mil/tools/Lists/DAUTools/Attachments/37/DoD%20-%20Guidebook,%20Cybersecurity%20Risk%20Management%20Framework,%20v1.08,%20Sep%202015.pdf

Re: Seeking a Template for a Cybersecurity Program Organizational CONOPS Document

j_M007 — Mon, 12 Feb 2018 21:35:16 GMT

Hello Deckard,

My Google search of +CONOPS +TEMPLATE revealed a good deal of information.

The first hits were in fact templates and how tos concerning the composition of the CONOPS document. I hope you will find the templates useful.

https://www.google.ca/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&ved=0ahUKEwirvNaMqKHZAhVCMd8KHaivBqUQFggrMAA&url=https%3A%2F%2Fwww.dau.mil%2Fcop%2Fbes%2FDAU%2520Sponsored%2520Documents%2FConcept%2520of%2520Operations%2520Template.DOC&usg=AOvVaw1t_w3lRt1WGD3TZ68S7wLL

https://www.google.ca/url?sa=t&rct=j&q=&esrc=s&source=web&cd=9&ved=0ahUKEwirvNaMqKHZAhVCMd8KHaivBqUQFghIMAg&url=http%3A%2F%2Fwww.fdot.gov%2Ftraffic%2Fits%2Fprojects_deploy%2FSEMP%2FConcept%2520of%2520Operations%2520Template.docx&usg=AOvVaw3YJL-AlykR_OYrhS-vc3Pv

Best regards.