General guidance for the Appendix E (ICD Cyber Survivability) includes:

- If not incorporated in the main document*, use this appendix to determine the CSRC of the capability requirement and describe Cyber Survivability Attribute requirements

- Cyber Survivability. Ensures warfighter systems are designed to prevent, mitigate, and recover from cyber-attacks by applying a risk managed approach to building and maintaining systems.

- The threat methodology employed by a cyber-review broadly accounts for mission type, cyber dependency level of the system, adversary threat tier, and impact level of system compromise in determining a CSRC that identifies appropriate strength of implementation levels.

- The following Cyber Survivability Attributes (CSAs) support the System Survivability pillars of prevent, mitigate, and recover (each of these CSA's are described in the JCIDS Manual, Annex C to Appendix G to Enclosure B):

- Prevent

- CSA-01: Control Access

- CSA-02: Reduce System's Cyber Detectability

- CSA-03: Secure Transmissions and Communications

- CSA-04: Protect System's Information from Exploitation

- CSA-05: Partition and Ensure Critical Functions at Mission Completion Performance Levels

- CSA-06: Minimize and Harden Attack Surfaces.

- Mitigate

- CSA-07: Baseline and Monitor Systems and Detect Anomalies

- CSA-08: Manage System Performance if Degraded by Cyber Events.

- Recover

- CSA-09: System Capabilities

- CSA-10: Actively Manage System's Configuration to Counter Vulnerabilities at Tactically Relevant Speeds.

- For more information see JCIDS Manual, Annex C to Appendix G of Enclosure B, and the Cyberspace Survivability Endorsement Implementation Guide (CSEIG) (Posted to the Requirements Management Community web site and to KM/DS). Note, the CSEIG has exemplar language you can leverage and then tailor to your needs for both the ICD (generic language) and the Cyber Survivability Attributes (CSAs) in a CDD.