Design Thinking: the Cyber Defense Strategy for Local Government Agencies

Design Thinking: the Cyber Defense Strategy for Local Government Agencies

Design Thinking: the Cyber Defense Strategy for Local Government Agencies

In early 2016, cyber hacktivists targeted the state of Michigan’s main website to draw attention to the Flint water crisis. Hacktivist (activists who are cyber hackers) attacks on state and local governments have extended to denying the public access to government websites to acquire information or use their services e.g., pay taxes. More sinister attacks may be directed towards local infrastructure, for example, the electrical grid, water treatment works, and transportation hubs. State and non-state actors are weaponizing cyber tools. North Korea, Russia, and China are building their arsenals through protestors and terrorist groups and the bored basement teenager.

With such an array of potential threats and local government faced with the challenge of where to direct limited resources, Design Thinking provides a possible approach to help frame and address cyber issues.

Design Thinking is particularly applicable to the homeland security mission given its value to solve “wicked” problems that are complex interdependencies and dynamic, therefore cannot be definitively described or solved. The homeland security community can use Design Thinking processes for developing innovative intervention strategies for these complex, dynamic cyber threats. Design Thinking can help drive a culture of innovation in a resourced constrained environment. As Anthony Masys states, “It is about not only understanding the future but also influencing it.”

Local government can employ Design Thinking by using these steps:

  • Empathize: Learn about the cyber issues involved. For example, capture perspectives from local government employees and their cyber practices (not just IT), and understand possible current and future motivations of perpetrators
  • Frame and Re-Frame: Frame and understand the cyber issues impacting the local government based on the empathize stage
  • Explore: Develop creative solutions for developing effective cyber defenses. These are not just technical but also human centric, for example, installing a culture of effective cyber-hygiene for employees to not unwittingly allow a hacker in
  •  Prototype: Review scaled down approaches to defend and prevent attacks. This may include new cyber-hygiene and work flow practices
  • Implement: Test and refine the approaches through red teaming hypothetical attacks and scenarios

The step-by-step Design Thinking process offers cyber security analysts with a dynamic and flexible approach to meet the adaptive threat.

About Arc Aspicio                                      Arc Aspicio is a management, strategy, and technology consulting firm that takes a mission-oriented approach to complex client challenges. As a rapidly growing company, Arc Aspicio has a bold strategy for 2016-2018 that drives growth through new capabilities in strategy, design, human capital, data analytics, information sharing, cybersecurity, and strategic communications. The company is known for a strong, collaborative culture that values gratitude – for its clients and its great team. And, #welovedogs! Follow us on Twitter @arcaspicio or learn more at www.arcaspicio.com

Blog Design Thinking Strategy

Contributors

Benjamin Sheppard |

Ben Sheppard is a Senior Associate at Arc Aspicio and has extensive experience in homeland security risk management issues on preparedness, response and recovery including communications and warnings. Ben has also taught a number of graduate courses at George Washington University. Sheppard holds a Ph.D. from King’s College London on the psychology of strategic terrorism. 

Discovering Talent: My Personal Story

Discovering Talent: My Personal Story

Discovering talent with potential has been a focal point of the Arc Aspicio since its founding in 2004. As a consulting firm, Arc Aspicio is in the talent business. We invest in people at all levels (including our interns) who show promise and potential, and help them grow the skills they need to be successful in consulting (or in an internal specialty role in our fun and very busy office).

General Services Administration Awards Arc Aspicio Professional Services Schedule

General Services Administration Awards Arc Aspicio Professional Services Schedule

Arlington, VA, January 10, 2018 — The General Services Administration (GSA) awarded Arc Aspicio the Professional Services Schedule (PSS) 00CORP in October 2017. This Multiple Award, Indefinite-Delivery, Indefinite-Quantity (IDIQ) schedule provides direct access to complex fixed-price or labor-hour professional services, including business consulting solutions.

The Resilience Spectrum for Emergency Management

The Resilience Spectrum for Emergency Management

The modern world is mired in uncertainty. When is the next terrorist attack? The next hurricane? The next nuclear threat? There are numerous complex risks that face the United States daily, and it is the job of the Department of Homeland Security (DHS) to choose the best way to counter them. To do this, it’s best to focus on resilience. However, rigid resilience practices such as implementing a “one-size-fits-all” response to threats are not effective, as they can sustain undesirable systems, oppose change, and disregard power relationships such as the benefit of authorizing tribal, local, and state authorities to tackle security challenges.

Day in the Life of a Project Leader

Day in the Life of a Project Leader

Around 6am the light in my room comes on low and gently, slowly brightens until reaching daylight strength. By 6:30, the artificial sun in the corner of my room tricking my brain into thinking the actual sun has risen, I’m awake. I go into the bathroom and begin my morning routine. This early in the day, my routine is essential to me actually getting ready and out the door by 7:30. Once I get to work, the routine is over.

Mr. Roboto: Your Newest Coworker

Mr. Roboto: Your Newest Coworker

Could your next cubemate be a robot? Elon Musk, the Tesla and SpaceX founder, is building our future coworkers and forming a world filled with Artificial Intelligence (AI) that could “beat us in just about everything,” including our jobs. As Musk attempts to create a real-life iRobot, many advantages and a possible partnership arise with this future. How can the Government and Homeland Security prepare and welcome new technological advancements?

Data + Strategy: Using Data to Inform Agency Strategy

Data + Strategy: Using Data to Inform Agency Strategy

Understanding the types of data available, gaining access to the right data, and making sense of data are daunting tasks for most organizations as they develop a strategy to meet mission demands and enterprise-wide goals. Data is especially challenging for the Government, yet provides the opportunity for insight for leaders as they strategically move their agencies forward.