SCOR Associate
An introduction to the five METEORSTORM functions, each applied to a basic example.
SCOR Associate introduces METEORSTORM, the Resilient Cyber Operations framework, one function at a time. Each function is explained, then applied to a basic example, so participants leave with the standard way to describe a space platform and record what threatens it.
View the one-pager Download the PDF
Learning objectives
On completion, participants will be able to:
| Function | Understand | Apply | |
|---|---|---|---|
| 01 | Concept of Operations | How to enumerate a complex system in a standard way: a structured taxonomy names each part, environment to asset, and an ontology links each part to its parent. | Apply the Concept of Operations function to a basic example: enumerate one telecommand path. |
| 02 | Contextualized Threat Modeling | How to record a threat in the same standard form, anchored by its target of exploitation to the one platform part it is directed at. | Apply the Contextualized Threat Modeling function to a basic example: anchor threats to that path. |
| 03 | Converged Detection Engineering | How to record an attack path in the same form, with its target and the data and signal sources needed to see it. | Apply the Converged Detection Engineering function to a basic example: trace one attack path. |
| 04 | Incident Response Preparation | How to record a detection signature in the same form, with the part it observes and the playbook it triggers. | Apply the Incident Response Preparation function to a basic example: write one signature and its playbook. |
| 05 | Adversary Management | How to record a resilience measure in the same form, with the part it protects. | Apply the Adversary Management function to a basic example: select measures for the traced path. |
Why standardize
- In your organization
- Security, operations and engineering describe the platform in the same terms. A finding moves from one team to the next without being translated, and nothing is lost at the handover.
- Across the Space ISAC community
- Members describe threats, attack paths and defenses in the same format. What one operator shares, another can read and act on straight away, machine to machine.
- Over time
- Each function builds on the one before. Work done once is reused, not redone, when the platform, the threat or the team changes.
Who it is for
SOC analysts, satellite operators, spacecraft engineers, and program and risk managers who are new to the framework. No prerequisites.
Dates and enrollment
Session dates and enrollment are on the SCOR Associate course page. Space ISAC members receive the member rate. Private session for one organization: 3,750.00 USD for up to 15 seats.
Provider
Delivered by D2 Team CORP, with Space ISAC Community members and Proof Labs. Questions: [email protected].