See below for expanded domain ontology for Cybersecurity & Sustainability

Dimension 1: System State

     1.1 Cyber & Social Ecosystems

1.      A. Actors & Capabilities
2.      B. Internet Layers
   1.      1. People
   2.      2. Information
   3.      3. Logical
   4.      4. Physical
3.      C. International Levels
   1.      1. Individual & Groups
   2.      2. State & Non-State
   3.      3. International System
   4.      4. Global System
4.      D. Overarching Global System
   1.      1. Human & Social
   2.      2. Environmental
   3.      3. Cyberspace
   4.      4. Intersection Among Systems

     1.2 Activities & Operations

1.      A. Cyber-IR Cybersecurity
   1.      1. Access
   2.      2. Encryption
   3.      3. Risk
   4.      4. Sustainability & Security Provision
2.      B. Cyber-IR System Sustainability
   1.      1. Loads
   2.      2. Capabilities
   3.      3. Changes
   4.      4. Other
3.      C. Operations & Services
4.      D. Other

     1.3 Support Systems

1.      A. Monitoring Vulnerability Status
2.      B. Cybersecurity Supports
3.      C. Management Capability
4.      D. Information & Communication

     1.4 Risk & Management

1.      A. Authority Base & Type
2.      B. Risk Assessment
3.      C. Practices & Policies
4.      D. Implementation Mechanisms

 

Dimension 2 -- System Problems:

     2.1 Problem Type

1.      A. Physical Damage
   1.      1. Intrusions & Damages
   2.      2. Cyber Attacks
   3.      3. Societal Damages
   4.      4. Other
2.      B. Threats to System Operations
   1.      1. System Overload
   2.      2. Capability Constraints
   3.      3. Mounting Demands
   4.      4. Threats to Life Supports
3.      C. Management & Regulations
4.      D. Threat Incidence—Cyber & Real
   1.      1. Threat Actor & Agent
   2.      2. Tool & Target
   3.      3. Scope & Scale
   4.      4. Analysis & Assessment

     2.2 Problem Tools & Target

1.      A. Natural Systems
2.      B. Cyber Systems
   1.      1. Dynamic Attack
   2.      2. Malicious Code
   3.      3. Bots & Botnets
   4.      4. Cyber Incident
3.      C. Human Systems
4.      D. Intersections Among Systems

     2.3 Threat Actors

1.      A. Individual & Groups
2.      B. States & Non-States
3.      C. International & Global
4.      D. Known & Unknown

     2.4 Damages & Impacts

1.      A. Damages to Cyber Systems
   1.      1. Exploiting Vulnerabilities
   2.      2. Attacks & Impacts
   3.      3. Damages
   4.      4. Other
2.      B. Burdens on Sustainability
   1.      1. Levels of Human Activity
   2.      2. Layers of Internet
   3.      3. Loads Over Capabilities
   4.      4. Life Supports
3.      C. Expansion of Vulnerabilities
4.      D. Loss of Resilience

 

Dimension 3 -- Technological & Scientific Responses:

     3.1 Technology Strategies

1.      A. Technology Innovation & Organization
   1.      1. Privacy Protections
   2.      2. Joint Private–Public Strategies
   3.      3. Resilient System Architecture
   4.      4. Computer Network Defense Analysis
2.      B. System Safety Architecture
   1.      1. Innovations for Sustainability
   2.      2. Monitoring Systems
3.      C. Information Protection & Management
4.      D. Computer Network Defense
   1.      1. Access
   2.      2. Infrastructure
   3.      3. Manpower
   4.      4. Software

     3.2 Capacity Building

1.      A. Skills & Personnel
2.      B. Technology “Hard” And “Soft”
   1.      1. Machine Learning & Evolution
   2.      2. Artificial Intelligence
   3.      3. Simulation & Forecasting
   4.      4. Other
3.      C. Technology Readiness Level
4.      D. Security & Sustainability Practice

     3.3 Risk Assessment

1.      A. Technical Operations & Standards
2.      B. Threat Detection & Mitigation
3.      C. System-Wide Assessments
4.      D. Technical Resilience

     3.4 Behavior Imperatives

1.      A. Deterrence & Defense
2.      B. System Improvements
3.      C. Coordination & Cooperation
4.      D. Recovery Mechanisms

 

Dimension 4 -- Socio-Economic & Political Responses:

     4.1 Institutional Responses

1.      A. Information Security Systems
   1.      1. Assurance Measures
   2.      2. Policy Measures
   3.      3. Voluntary Measures
   4.      4. Other
2.      B. National Sustainability Measures
3.      C. Market Mechanisms
4.      D. Legal & Regulatory Methods

     4.2 Capacity Building

1.      A. Situation Awareness
   1.      1. Asset Management
   2.      2. Data & Information Assessment
   3.      3. Monitoring Performance
   4.      4. Cyber Incident Responses
2.      B. Enterprise Risk Management
3.      C. Sustainability of Capacity
4.      D. Multi-Stake Holder Collaboration

     4.3 System Sustainability

1.      A. System Assessment & Audits
2.      B. Integrated Risk Management
3.      C. Vulnerability Management & Institutional Response
4.      D. Other

     4.4 Policy Imperatives

1.      A. Response Focus
2.      B. Insurance & Assessment Measures
   1.      1. Security Provision & Policy
   2.      2. Continuity of Operations
   3.      3. Access Management Plans
   4.      4. Supply Chain Risk Management
3.      C. Legal & Regulatory Strategies
4.      D. Resilience Strategy