An Analytical Framework for Cybersecurity Assessment

Cyber threats have become a major problem for every organization. There are many technological solutions, defenses, a lot of advice and many advisors. Before these can be effective, an organization must be able to frame the problem. Specifically, it must understand whether its defenses can mitigate cyber risks, and whether they are effective against existing threats and can provide a means to secure the future. Without such insight, the organization cannot quantitatively assess where investments in cybersecurity should be made. This article describes an analytical framework supporting the security team’s and senior leadership’s efforts to identify their organization . . .