Cyber-Informed Engineering School
Twelve self-paced lessons introduce Cyber-Informed Engineering principles and practical methods for strengthening the resilience of critical infrastructure through engineering decisions.
Begin Your Learning Journey
The Cyber-Informed Engineering School introduces the 12 foundational principles of Cyber-Informed Engineering (CIE). Through short lessons, participants will learn how engineering decisions can reduce the consequences of cyberattacks and strengthen the resilience of critical infrastructure.
Each lesson includes a key question, practical guidance and a real-world implementation example to help you apply these concepts in your own work.
Continue Your CIE Journey
Looking for the full Cyber-Informed Engineering program? Explore research, publications, implementation guidance, events and additional learning resources.
The 12 CIE Principles Journey
Lessons Available Now
Consequence-Focused Design
Key Question:
How do I understand what critical functions my system must ensure and the undesired consequences it must prevent?
Identify critical functions and the undesired consequences your system must prevent.
Lessons Coming Soon
Engineering Controls
Key Question:
How do I select and implement controls to reduce avenues for attack or the damage that could result?
Design systems to remain safe even when compromised.
Available October 19
Secure Information Architecture
Key Question:
How do I prevent undesired manipulation of important data?
Protect critical data from manipulation and misuse.
Available October 26
Design Simplification
Key Question:
How do I determine which features of my system are not absolutely necessary to achieve the critical functions?
Simplify system design to reduce risk and strengthen resilience.
Available November 2
Layered Defenses
Key Question:
How do I create the best compilation of system defenses?
Build multiple layers of protection to strengthen system resilience.
Available November 9
Active Defense
Key Question:
How do I proactively prepare to defend my system from any threat?
Prepare your system to detect, respond to and recover from cyber events.
Available November 16
Taking a holiday break
We’ll return with lessons in January.
Interdependency Evaluation
Key Question:
How do I understand where my system can impact others or be impacted by others?
Identify critical dependencies to reduce cascading risks and improve resilience.
Available January 4
Digital Asset Awareness
Key Question:
How do I understand where digital assets are used, what functions they are capable of and our assumptions about how they work?
Understand your digital assets to reduce risk and improve resilience.
Available January 11
Cyber-Secure Supply Chain Controls
Key Question:
How do I ensure my providers deliver the security the system needs?
Strengthen supply chain security to protect critical system functions.
Available January 18
Planned Resilience
Key Question:
How do I turn “what ifs” into “even ifs”?
Plan for disruption to keep critical systems operating safely.
Available January 25
Engineering Information Control
Key Question:
What Is engineering information control?
Protect sensitive engineering information to strengthen system security and resilience.
Available February 1
Organizational Culture
Key Question:
How do I ensure that everyone’s behavior and decisions align with our security goals?
Build a culture where everyone shares responsibility for cybersecurity resilience.
Available February 8