Military Communications and Information Technology: A Trusted ...

Chapter 4: Information Assurance & Cyber Defence
427
Figure 5. Main stages of populating data base of invents
• information related to stationary/mobile object,
• means by which an information was captured – human senses / additional
sensors,
• should the information be public/ or restricted, read only, or possible to
modify,
• quantity and quality of information sources (including personal information)
that have confirmed particular elements of information about incident,
• is the information new in repository or it is an update of existing one.
To summarize above structure of an observation sheet a sample has been
provided in the annex to this paper.
VI. Conclusions
The proposed methodology of collecting information about incidents in cyberspace
mapped into a particular group of military activities should enable answering
questions about (risk of) certain threats existing in today’s battlefield (especially
incidents in the area of cyber security). Such method (of collecting information
about cyber incidents) introduces its own identity.
In this paper authors propose a comprehensive method that can be applied to
collecting information about incidents based on the incidents observation sheet.
An effective method of gathering factual data is in the authors’ opinion one
of the biggest challenges and show-stoppers in the process of learning adhering
to a lessons learnt paradigm (especially considering negative experiences). Thus
the authors believe that the proposed method (and recommendations) of collecting
information about incidents can be a valuable input into the process of continuous
improvement of security level in the cyberspace.