Method for the Continuous Calculation of a Cyber Security Risk Index

A computerized system configured to assess a cyber security risk, the system comprising:

• a plurality of sensors, the plurality of sensors configured to obtain cyber security precursor information;
• an event database configured to store one or more events;
• a fact database configured to store one or more facts;
• and
• a processor programmed to perform the steps of:
• (i) receiving the cyber security precursor information from the plurality of sensors;
• (ii) normalizing the obtained cyber security precursor information to a common information model;
• (iii) generating, from the normalized cyber security precursor information, one or more events;
• (iv) storing the generated one or more events in the event database;
• (v) producing, from the one or more generated events, one or more facts;
• (vi) storing the one or more facts in the facts database;
• (vii) calculating a plurality of risk indicators from the one or more facts;
• (viii) normalizing the plurality of risk indicators to a common model;
• (ix) calculating, using the normalized plurality of risk indicators, one or more cyber risk index component scores;
• and (x) calculating, using the one or more cyber risk index component scores, a cyber risk indicator index.

A computer system configured to assess a cyber security risk, the computer system comprising:

• a non-transitory computer-readable storage medium configured to store data collected by the computer system and comprising computer-executable instructions;
• a processor programmed to execute the computer-executable instructions resulting in the computer system performing the steps of:
• receiving cyber security precursor information from a plurality of sensors;
• (ii) normalizing the obtained cyber security precursor information to a common information model;
• (iii) generating, from the normalized cyber security precursor information, one or more events;
• (iv) storing the generated one or more events in the non-transitory computer-readable storage medium;
• (v) producing, from the one or more generated events, one or more facts;
• (vi) storing the one or more facts in the non-transitory computer-readable storage medium;
• (vii) calculating a plurality of risk indicators from the one or more facts;
• (viii) normalizing the plurality of risk indicators to a common model;
• (ix) calculating, using the normalized plurality of risk indicators, one or more cyber risk index component scores;
• and (x) calculating, using the one or more cyber risk index component scores, a cyber risk indicator index.