Consequence-Driven
Cyber-Informed Engineering
Safeguarding critical infrastructure operations
Accelerating analysis to protect critical functions
Consequence-driven Cyber-Informed Engineering (CCE) is a methodology focused on securing the nation’s critical infrastructure systems.
Developed at Idaho National Laboratory, CCE begins with the assumption that if a critical infrastructure system is targeted by a skilled and determined adversary, the targeted network can and will be penetrated.
This “think like the adversary” approach provides critical infrastructure owners, operators, vendors and manufacturers a disciplined methodology to:
- Evaluate complex systems.
- Determine what must be fully safeguarded.
- Apply proven engineering strategies to protect an industry’s most critical assets.
CCE Methodology and Four-Phase Process
CCE provides a four-phase process for safeguarding critical infrastructure operations. The following graphic and animation provide more information for each of the four phases of the CCE Methodology and the Kill Chain Workflow.
Professional Development
These three regional industrial control systems (ICS) trainings are IN-PERSON ONLY and registration is FREE. Courses are sponsored by the Department of Energy and facilitated by Idaho National Laboratory. Registrants are responsible for travel expenses (flight, hotel and meals).
CCE Accelerate
Provides critical infrastructure companies with a self-guided approach to conducting their own CCE effort and is focused on preventing the sabotage of critical infrastructure functions.
ICS Fundamentals
A non-cyber introduction to energy sector control systems and operations, includes tours of area infrastructure companies and facilities. US CITIZENS ONLY.
INL ICS Training Week
A combined week of trainings at one location that inlcude general infrastructure ICS Fundamentals, CCE-based ACCELERATE and energy sector focused CyberStrike.
| Month / Day | Location | Connection | Accelerate | ICS Fundamentals | CyberStrike |
|---|---|---|---|---|---|
| February 22-26 | San Antonio TX | CPS | X | X | X |
| March 8-12 | Charlotte NC | FBI | X | ||
| April 19-23 | Washington DC | DOE-HQ | X | X | X |
| May 3-7 | New York City NY | Con-Ed | X | ||
| May 18-20 | Idaho Falls ID | INL | X | X | |
| June 14-18 | Los Angeles CA | FBI | X | X | X |
| July 12-16 | Idaho Falls ID | INL | X | X | |
| August 9-13 | Sioux Falls SD | GRIT | X | X | |
| October 18-22 | Phoenix AZ | FBI | X | X | X |
Looking for ICS Cybersecurity 301, Detect the Attacker 311 or various Cyberstrike course details?
Other Engagements and Related Training
INL and DOE-supported CCE Engagement (Tier 1) – Specific engineering solutions, not just cyber controls, to design out cyber risk from critical operations.
Self-Driven CCE Engagement (Tier 2) – In-depth, team-based training for Tier 1 individuals
Workforce Development – In-depth, team-based training for select individuals who will help Tier 1 partners execute a CCE engagement.
Partnering with Leading Critical Infrastructure Consultants
Through close collaboration with industry, INL supports these partners with CCE methodologies, processes and training materials to proliferate national security.
Methodology Background Reports and Papers
Connect with our Team
Questions about registration or course details?
Our team is available to answer questions about training options, schedules and enrollment.
CCE Program Team
Arik Reynolds, Lead