US 11,909,758 B2 · Method and system for evaluating cyber security risks

Abstract

Systems and methods described herein provide a cyber risk assessment service. A computing device determines weights for techniques of a cyber security framework based on historical industry impact. The computing device associates an enterprise network with an industry identifier, obtains customer risk data for the enterprise network, and normalizes and/or combines the customer risk data to form normalized risk scores. The computing device maps the customer risk data to corresponding techniques in the cyber security framework, generates technique scores based on the mapping and the normalized risk scores, and generates weighted technique scores using some of the weights selected based on the industry identifier. The computing device calculates an overall security score for the enterprise network based on the weighted technique scores, identifies a corrective recommendation for the overall security score, and provides the overall security score and the corrective recommendation for presentation to a user.

Claims20

Dependent claims

A method, comprising:

obtaining, by a computing device, customer risk data for a customer network;
associating, by the computing device, the customer risk data with at least one of multiple corresponding attack techniques in a cyber security framework;
generating, by the computing device, multiple technique scores based on the associating and the customer risk data;
weighting, by the computing device, the multiple technique scores based on an industry-type associated with the customer network to generate weighted technique scores;
and
providing, by the computing device, an overall security score for the customer network based on the weighted technique scores.

3 more elements

Dependencies are inferred from the claim text.

Method and system for evaluating cyber security risks

Life of this patent

Method and system for evaluating cyber security risks

Life of this patent

Abstract

Claims20