Software Engineering Institute

Operational resilience practitioners in industry, government, and the military have the unenviable task of recommending and acting upon priorities to enable their organizations to accomplish their missions during times of stress. However, for many, a formal method of acquiring and leveraging objective threat intelligence to support resilience, risk, and project management has remained elusive. This special report proposes a framework called Intelligence Preparation for Operational Resilience (IPOR) to create a model for structured analysis of their intelligence needs and a way to operationalize threat intelligence once they have received it. The IPOR references and builds upon frameworks such as the military’s Intelligence Preparation of the Battlefield process and the CERT® Resilience Management Model to build a structure to meet this end.