2020 SCAF/ICEAA Virtual Workshop: Bob Hunt

Cost and Data Issues facing Today’s Cybersecurity Analysts
Bob Hunt
Webinar Presentation: Tuesday, November 17, 2020 at 4pm GMT/11am EST

Cybersecurity threats and counter measures are evolving at a rapid pace. Analysts need a solution for assessing a non-static situation. Many organizations are simply costing a proposed plan without a strategic or sustainment plan. Current studies imply that it is more costly to defend against a cybersecurity attack than to execute the attack. Studies also indicate that the typical security breach is not detected until about 200 days after the breach. Analysts need to understand the scope of cybersecurity. Is it physical, computer, hardware, people, policy, or all of the above? This presentation evaluates three approaches to a cybersecurity cost analysis. Thy three current approaches to costing cyber security are; economic/return on investment, industrial engineering/cost build up, and parametric. The strengths and weaknesses of each approach are discussed. Two emerging parametric techniques are discussed in this presentation. Data sources and data shortfalls are also discussed.

Bob Hunt has over 40 years of cost estimating and analysis experience. He received his Society for Cost Estiating and Analysis (SCA) Certification in 1991. He has served in senior technical and management positions at Dulos Incorporated (President), Galorath Federal Incorporated (President), Galorath Incorporated (Vice President for Services), CALIBRE Systems (Vice President), CALIBRE Services (President), SAIC (Vice President), the U.S. Army Cost and Economic Analysis Center (Chief of the Vehicles, Ammunition, and Electronics ICE Division, U.S. Army Deputy Directorate of Cost Analysis.