MITRE MTR 170001 · JANUARY 2017
Cyber Resiliency
Design Principles
An interactive crosswalk from five risk-management strategies to fourteen architecture and design principles. Use the selection guide to tailor a defensible set, then track decisions in a browser-local worksheet.
STRATEGY → STRUCTURE
Follow a design decision.
Select a strategic principle to highlight the structural principles that put it into the architecture. Select any card for concise guidance and its exact report section.
Strategic principles
Risk-management strategy
Structural principles
Architecture and design
CROSSWALK
See strategy-to-structure relationships.
Rows are structural principles; columns are strategic principles. Select a label to open its detail. The matrix is a navigation aid synthesized from the report's principle descriptions—not a control baseline or compliance mapping.
SELECTIVE USE
Tailor before you apply.
The report does not prescribe all nineteen principles for every system. Use its three selection perspectives to document why a principle belongs—or does not belong—in the design.
LOCAL WORKSPACE
Record the tailored design set.
Data stays in this browser. Nothing is uploaded.
READING MODEL
Principles guide decisions.
They do not replace analysis.
- 01
Frame the risk strategy
Start with the strategic principles that match the mission, environment, and threat assumptions.
- 02
Translate into structure
Follow related structural principles into architecture, design, operations, and lifecycle decisions.
- 03
Tailor with evidence
Use the selection factors, record owners and rationale, and retain evidence for each decision.
- 04
Revisit as conditions change
Reassess the selected set when threats, missions, technologies, or dependencies change.
Source and scope
Principle names, organization, and source locations come from Bodeau and Graubart, Cyber Resiliency Design Principles: Selective Use Throughout the Lifecycle and in Conjunction with Related Disciplines, MITRE Technical Report MTR 170001 (2017). The short summaries, guidance, relationship view, and prompts are concise teaching aids based on the report. They are not verbatim text, a compliance mapping, or a substitute for the publication.
Read the MITRE report ↗