Cyber risk assessment and management system and method
AssigneeGemini Cyber, Inc.
InventorsDouglas Marshall Ross, Christopher Edwards
Life of this patent
Estimating the term…
Abstract
A system for cyber risk assessment includes: a processor; and memory connected to the processor, wherein the memory stores instructions that, when executed by the processor, cause the processor to: receive data corresponding to one or more technology stacks; access one or more security standards in a data store connected to the processor, at least one of the security standards corresponding to at least one of the technology stacks; and determine a cyber risk score based on the data and the at least one of the security standards.
Claims20
A system for cyber risk assessment comprising:
- a processor;
- and
- a non-transitory computer-readable medium coupled to the processor, wherein the non-transitory computer-readable medium stores computer-readable instructions that, when executed by the processor, cause the processor to:
- receive data corresponding to one or more technology stacks;
- access one or more security standards in a data store coupled to the processor, at least one of the security standards corresponding to at least one of the technology stacks;
- and
- determine a cyber risk score based on the data and the at least one of the security standards.
A method for cyber risk assessment, the method comprising:
- receiving, by a processor, data corresponding to one or more technology stacks;
- accessing, by the processor, one or more security standards in a data store coupled to the processor, at least one of the security standards corresponding to at least one of the technology stacks;
- and
- determining, by the processor, a cyber risk score based on the data and the at least one of the security standards.
A system for cyber risk assessment comprising:
- a processor;
- and
- a non-transitory computer-readable medium coupled to the processor, wherein the non-transitory computer-readable medium stores computer-readable instructions that, when executed by the processor, cause the processor to:
- receive data corresponding to one or more technology stacks;
- access one or more security standards in a data store coupled to the processor, at least one of the security standards corresponding to at least one of the technology stacks;
- identify a technology multiplier corresponding to a probability of loss for each of the technology stacks;
- identify a technology stack value for each of the technology stacks;
- multiply a corresponding technology multiplier with a corresponding technology stack value for each of the technology stacks to obtain multiplication values for each of the technology stacks;
- and
- add the multiplication values together to determine a cyber risk score.
Dependencies are inferred from the claim text.