Advanced cyber threats present a challenge to established engineering and strategic analysis processes: Mitigation techniques vary widely in maturity; relevance to organizations, mission, and systems; and affordability, efficiency, and effectiveness. Cyber mission assurance engineering complements and extends established processes, to facilitate cost-effective risk management.