# US 2018/0322292 A1 · Cybersecurity maturity forecasting tool/dashboard > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0322292 A1 - Document ID: US20180322292A1 - Status: Published application - Kind: A1 - Application number: 15/584,735 - Filed: 2017-05-02 - Published: 2018-11-08 - Earliest claimed: 2017-05-02 - Assignees: Dignity Health - Applicants: Dignity Health - Inventors: Michael Vincent Tedeschi - Web page: https://patentgrep.com/patent/US20180322292A1 ## CPC - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - G06Q 10/0635: Risk analysis of enterprise or organisation activities - G06Q 10/06393: {Score-carding, benchmarking or key performance indicator [KPI] analysis} - H04L 43/065: related to network devices - H04L 63/1433: {Vulnerability analysis} - G06F 2221/034: Test or assess a computer or a system - G06F 2221/2101: Auditing as a secondary aspect - H04L 63/1458: {Denial of Service} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Systems and methods of the present invention provide for executing a first database query selecting a project objective data record storing a forecast maturity score and a forecast date earlier in time than a current date. The forecast maturity score defines a level of compliance with a cybersecurity framework and the forecast date identifies a date by which an organization will achieve the level of compliance. The system executes a remote procedure call to determine whether a system process is performing a project objective defined within the project objective data record, and responsive to a determination that the system process is not performing the project objective, execute a second database query updating the forecast date within the project objective data record. ## Claims ### Claim 1 A system, comprising a server hardware computing device coupled to a network and comprising at least one processor executing specific computer-executable instructions within a memory that, when executed, cause the system to: execute a first database query selecting a project objective data record storing a forecast maturity score and a forecast date earlier in time than a current date, wherein: the forecast maturity score defines a level of compliance with a cybersecurity framework; and the forecast date identifies a date by which an organization will achieve the level of compliance; execute a remote procedure call to determine whether a system process is performing a project objective defined within the project objective data record; and responsive to a determination that the system process is not performing the project objective, execute a second database query updating the forecast date within the project objective data record. ### Claim 2 (depends on 1) The system of claim 1, wherein the project objective comprises determining whether the system process enforces at least one approved authorization for: a logical access to at least one information and system resource in accordance with at least one applicable access control policy; or a flow of information within the system and between one or more interconnected systems based on at least one organization-defined policy. ### Claim 3 (depends on 1) The system of claim 1, wherein the project objective comprises determining whether the system process protects against or limits the effects of at least one organization-defined type of denial of service attack by employing at least one organization-defined security safeguard. ### Claim 4 (depends on 1) The system of claim 1, wherein the project objective comprises determining whether the system process: monitors and controls at least one communication at an external boundary of the system and at least one key internal boundary within the system; implements at least one subnetwork for at least one publicly accessible system component that is physically or logically separated from at least one internal organizational network; and connects to at least one external network or information system only through at least one managed interface consisting of a plurality of boundary protection devices arranged in accordance with an organizational security architecture. ### Claim 5 (depends on 1) The system of claim 1, wherein the project objective comprises determining whether the system process generates at least one audit record containing information that establishes a type of an event, when the event occurred, where the event occurred, a source of the event, an outcome of the event, and an identity of any individuals or subjects associated with the event. ### Claim 6 (depends on 1) The system of claim 1, wherein the project objective comprises determining whether the system process performs an audit of at least one software update required to overcome a detected security weakness within the system. ### Claim 7 (depends on 1) The system of claim 1, wherein the instructions cause the system to: decode, from a graphical user interface (GUI), an input identifying a forecast report date subsequent to the current date; execute a third database query identifying, within the project objective data record, the forecast maturity score associated in the database with the forecast date closest in time to the forecast report date; display, on the GUI, the project objective, and the forecast maturity score for the project objective. ### Claim 8 (depends on 7) The system of claim 7, wherein the instructions cause the system to: execute a fourth database query identifying, within the project objective data record, an actual maturity score associated in the database with an actual date closest in time to the current date; display, on the GUI, the project objective, and a current maturity score for the project objective. ### Claim 9 (depends on 8) The system of claim 8, wherein the instructions cause the system to display, on the GUI, the project objective, and an assessment maturity score for the project objective derived from an organization assessment of the level of compliance of the organization. ### Claim 10 A method, comprising: executing, by a server hardware computing device coupled to a network and comprising at least one processor executing specific computer-executable instructions within a memory, a first database query selecting a project objective data record storing a forecast maturity score and a forecast date earlier in time than a current date, wherein: the forecast maturity score defines a level of compliance with a cybersecurity framework; and the forecast date identifies a date by which an organization will achieve the level of compliance; executing, by the server hardware computing device, a remote procedure call to determine whether a system process is performing a project objective defined within the project objective data record; and responsive to a determination that the system process is not performing the project objective, executing, by the server hardware a second database query updating the forecast date within the project objective data record. ### Claim 11 (depends on 10) The method of claim 10, further comprising the step of determining, by the server hardware computing device, whether the system process enforces at least one approved authorization for: a logical access to at least one information and system resource in accordance with at least one applicable access control policy; or a flow of information within the system and between one or more interconnected systems based on at least one organization-defined policy. ### Claim 12 (depends on 10) The method of claim 10, further comprising the step of determining, by the server hardware computing device, whether the system process protects against or limits the effects of at least one organization-defined type of denial of service attack by employing at least one organization-defined security safeguard. ### Claim 13 (depends on 10) The method of claim 10, further comprising the step of determining, by the at server hardware computing device, whether the system process: monitors and controls at least one communication at an external boundary of the system and at least one key internal boundary within the system; implements at least one subnetwork for at least one publicly accessible system component that is physically or logically separated from at least one internal organizational network; and connects to at least one external network or information system only through at least one managed interface consisting of a plurality of boundary protection devices arranged in accordance with an organizational security architecture. ### Claim 14 (depends on 10) The method of claim 10, further comprising the step of determining, by the server hardware computing device, whether the system process generates at least one audit record containing information that establishes a type of an event, when the event occurred, where the event occurred, a source of the event, an outcome of the event, and an identity of any individuals or subjects associated with the event. ### Claim 15 (depends on 10) The method of claim 10, further comprising the step of determining, by the server hardware computing device, whether the system process performs an audit of at least one software update required to overcome a detected security weakness within the system. ### Claim 16 (depends on 10) The method of claim 10, further comprising the steps of: decoding, by the server hardware computing device, from a graphical user interface (GUI), an input identifying a forecast report date subsequent to the current date; executing, by the server hardware computing device, a third database query identifying, within the project objective data record, the forecast maturity score associated in the database with the forecast date closest in time to the forecast report date; displaying, by the server hardware computing device, on the GUI, the project objective, and the forecast maturity score for the project objective. ### Claim 17 (depends on 16) The method of claim 16, further comprising the steps of: executing, by the server hardware computing device, a fourth database query identifying, within the project objective data record, an actual maturity score associated in the database with an actual date closest in time to the current date; displaying, by the server hardware computing device, on the GUI, the project objective, and a current maturity score for the project objective. ### Claim 18 (depends on 17) The method of claim 17, further comprising the steps of displaying, by the server hardware computing device, on the GUI, the project objective, and an assessment maturity score for the project objective derived from an organization assessment of the level of compliance of the organization.