Method and system for assessing effectiveness of cybersecurity controls in an ot environment

A non-transitory computer readable storage medium having stored thereon instructions for monitoring and assessing an overall cybersecurity posture level of an operation technology environment that, when executed by a computing device, cause the computing device to perform operations comprising:

• receiving metrics data for a corresponding one of each of a plurality of cybersecurity posture indices (CPIi) for the operation technology environment;
• determining a cybersecurity posture index (CPIi) value for each of the plurality of cybersecurity posture indices (CPIi) based on the metrics data;
• applying a weight to each of the plurality cybersecurity posture index (CPIi) values to calculate a respective weighted cybersecurity posture index (wCPIi) value;
• determining an overall cybersecurity posture level of the operation technology environment based on a sum of each weighted cybersecurity posture index (wCPIi) value;
• generating a notification message, including image rendering data and commands;
• and
• sending the notification message to a computer resource asset to render an image of a snapshot cybersecurity posture level for at least one of the plurality of cybersecurity posture indices (CPIi).

A system for monitoring and assessing an overall cybersecurity posture level of an operation technology environment to increase said level when the level is determined to be below a setpoint value, the system comprising:

• a cybersecurity posture assessment and remediation (CPAR) stack arranged to
• receive metrics data for a corresponding one of each of a plurality of cybersecurity posture indices (CPIi) for the operation technology environment, and
• determine a cybersecurity posture index (CPIi) value for each of the plurality of cybersecurity posture indices (CPIi) based on the metrics data;
• and
• a key performance index (KPI) determiner arranged to
• apply a weight to each of the plurality cybersecurity posture index (CPIi) values to calculate a respective weighted cybersecurity posture index (wCPIi) value,
• determine an overall cybersecurity posture level of the operation technology environment based on a sum of each weighted cybersecurity posture index (wCPIi) value,
• generate a notification message, including image rendering data and commands, and
• send the notification message to a computer resource asset to render an image of a snapshot cybersecurity posture level for at least one of the plurality of cybersecurity posture indices (CPIi).