Cyber Soldier project - A threat-led methodology for assessing the Digital Resilience of cybersecurity systems

In order to comply with European regulatory frameworks like the Digital Operational Resilience Act (DORA), we propose the Cyber Soldier approach and tool set, which presents a threat-led approach for evaluating the digital resilience of cybersecurity systems inside enterprises. This approach, in contrast to conventional vulnerability assessments or penetration testing, focuses on simulating the tactics, methods, and procedures (TTPs) of actual attackers in order to assess the efficacy of operational resilience mechanisms and cybersecurity measures in production systems. In order to assess the organization's readiness for complex cyberthreats, the suggested approach combines threat information, red team scenario creation, and detection performance analysis into a single procedure. We show how the proposed framework connects the operational practice of resilience testing with the strategic compliance obligations under DORA. We also provide some preliminary statistics about the use of the Cyber Soldier toolkit in practical settings.