2026-09-20T21:42:39Zhttps://dspace.mit.edu/server/oai/request

oai:dspace.mit.edu:1721.1/1177892022-02-01T16:19:02Zcom_1721.1_7582com_1721.1_7581col_1721.1_131023

Donna H. Rhodes and Daniel E. Hastings. Reid, Jack Burnett Technology and Policy Program. Massachusetts Institute of Technology. Department of Aeronautics and Astronautics Massachusetts Institute of Technology. Engineering Systems Division Massachusetts Institute of Technology. Institute for Data, Systems, and Society Technology and Policy Program 2018-09-17T14:49:42Z 2018-09-17T14:49:42Z 2018 2018 http://hdl.handle.net/1721.1/117789 1051211553 Thesis: S.M., Massachusetts Institute of Technology, Department of Aeronautics and Astronautics, 2018. Thesis: S.M. in Technology and Policy, Massachusetts Institute of Technology, School of Engineering, Institute for Data, Systems, and Society, Technology and Policy Program, 2018. This electronic version was submitted by the student author. The certified thesis is available in the Institute Archives and Special Collections. Cataloged student-submitted from PDF version of thesis. Includes bibliographical references (pages 143-157). Acquisition programs increasingly use model-centric approaches, generating and using digital assets throughout the lifecycle. Model-centric practices have matured, yet in spite of sound practices there are uncertainties that may impact programs over time. The emergent uncertainties (policy change, budget cuts, disruptive technologies, threats, changing demographics, etc.) and related programmatic decisions (e.g., staff cuts, reduced training hours) may lead to cascading vulnerabilities within model-centric acquisition programs, potentially jeopardizing program success. Program managers are increasingly faced with novel vulnerabilities. They need to be equipped with the means to identify model-centric program vulnerabilities and determine where interventions can most effectively be taken. In this research, Cause-Effect Mapping (CEM), a vulnerability assessment technique, is employed to examine these vulnerabilities. Using a combination of literature investigation, expert interviews, and usability testing, a CEM is created to represent the novel vulnerabilities posed by model-centric practices in acquisition programs. Particular attention is paid to cybersecurity vulnerabilities, which pose a serious threat to the successful implementation of model-centric practices. From this CEM, key gaps in program manager knowledge and organizational policies are identified and potential responses proposed. Naval Postgraduate School Acquisition Research Programs Grant No. N00244-17-1-0011 by Jack Burnett Reid. S.M. S.M. in Technology and Policy 157 pages eng Massachusetts Institute of Technology MIT theses are protected by copyright. They may be viewed, downloaded, or printed from this source but further reproduction or distribution in any format is prohibited without written permission. http://dspace.mit.edu/handle/1721.1/7582 Aeronautics and Astronautics. Institute for Data, Systems, and Society. Engineering Systems Division. Technology and Policy Program. Assessing and mitigating vulnerability chains in model-centric acquisition programs Thesis application/pdf false Publication unknown unknown <Publication xmlns="https://www.openaire.eu/cerif-profile/1.1/" id="245f3d58-b79f-44d9-bbaa-d14ca4375faa"> <Type xmlns="https://www.openaire.eu/cerif-profile/vocab/COAR_Publication_Types">http://purl.org/coar/resource_type/c_1843</Type> <Language>eng</Language> <Title>Assessing and mitigating vulnerability chains in model-centric acquisition programs</Title> <PublishedIn> <Publication> </Publication> </PublishedIn> <PublicationDate>2018</PublicationDate> <Authors> <Author> <DisplayName>Reid, Jack Burnett</DisplayName> <Affiliation> <OrgUnit> </OrgUnit> </Affiliation> </Author> </Authors> <Editors> </Editors> <Publishers> <Publisher> <DisplayName>Massachusetts Institute of Technology</DisplayName> <OrgUnit /> </Publisher> </Publishers> <License>http://dspace.mit.edu/handle/1721.1/7582</License> <Keyword>Aeronautics and Astronautics.</Keyword> <Keyword>Institute for Data, Systems, and Society.</Keyword> <Keyword>Engineering Systems Division.</Keyword> <Keyword>Technology and Policy Program.</Keyword> <Abstract>Acquisition programs increasingly use model-centric approaches, generating and using digital assets throughout the lifecycle. Model-centric practices have matured, yet in spite of sound practices there are uncertainties that may impact programs over time. The emergent uncertainties (policy change, budget cuts, disruptive technologies, threats, changing demographics, etc.) and related programmatic decisions (e.g., staff cuts, reduced training hours) may lead to cascading vulnerabilities within model-centric acquisition programs, potentially jeopardizing program success. Program managers are increasingly faced with novel vulnerabilities. They need to be equipped with the means to identify model-centric program vulnerabilities and determine where interventions can most effectively be taken. In this research, Cause-Effect Mapping (CEM), a vulnerability assessment technique, is employed to examine these vulnerabilities. Using a combination of literature investigation, expert interviews, and usability testing, a CEM is created to represent the novel vulnerabilities posed by model-centric practices in acquisition programs. Particular attention is paid to cybersecurity vulnerabilities, which pose a serious threat to the successful implementation of model-centric practices. From this CEM, key gaps in program manager knowledge and organizational policies are identified and potential responses proposed.</Abstract> <Access xmlns="http://purl.org/coar/access_right" > </Access> </Publication>