Framework for improving critical infrastructure of cybersecurity

This web-based tool is a research based project. The project is based on the Framework for Improving Critical Infrastructure Cybersecurity by National Institute of Standards and Technology (NIST) Version 1.1 which has been observed and analyzed by the organization to measure any s

Project Title

Framework for improving critical infrastructure of cybersecurity

Project Area of Specialization

Cyber Security

Project Summary

This web-based tool is a research based project. The project is based on the Framework for Improving Critical Infrastructure Cybersecurity by National Institute of Standards and Technology (NIST) Version 1.1 which has been observed and analyzed by the organization to measure any size and level of risks for the betterment of Cybersecurity by applying the best practices and principles. The automation and prioritization of risks of the Framework provides a common organizing structure for multiple approaches to cybersecurity by assembling standards, guidelines, and practices that are working effectively today. Moreover, because it references globally recognized standards for cybersecurity, the Framework can serve as a model for international cooperation in strengthening cybersecurity in critical infrastructure as well as other sectors and communities. The critical infrastructure community includes public and private owners and operators, and other entities with a role in securing the Nation’s infrastructure. The Cybersecurity tool works in a manner that it provides a list of risks which could affect the cybersecurity of any organization. Making it easy for the users to identify, analyses and mitigate the risks. In this way the user (i.e. the organization in our case) could select the resists and rate it accordingly. At the end, the calculated results of the estimated risk effects are shown. Which helps the organization to take the precautions and reduce risk effects.

Project Objectives

The Cybersecurity Framework is made to improve the security level of the organizations. The Framework take the following targeted goals in consideration.

• Providing clear understanding and possible risks that could affect the organization’s security.
• Proposing the method of prioritization by providing readiness level to the risk so that the organization can check on their risks which could effect them.
• The quantifying tool will also help in mitigating the possible risks in any given system.
• Prioritizing the cybersecurity results by developing Target Profiles.
• Determining the effect each risk carries.
• Automating the framework and enabling the organizations to measure their risk levels.

Project Implementation Method

In the tool for Cyber Security, we used the simple scoring method by which the risks identified by the Framework can easily be measured and reflect the current cybersecurity level of any organization. We use the readiness indicators to identify the gaps in the existing processes.

The readiness levels are

Unstable: It means that the risks are in informal state and not focussed by the organization. It is the early stage of the risk.

Progressive: It shows that the risks are in progress, the level is moderate here.

Standardized:Formal processes has been developed by the organization. This evaluation and adaptation of the risks are done by the organization continuously.

Scoring:

1. In this, the total number of questions are counted with their specified readiness level, Let’s call this “Answers” .

2. Now the total number of questions answered are divided by the total number of risk’s questions resulting their readiness level percentage.Let’s call this “Readiness Percentage”.

Benefits of the Project

The following are the main benefits of this project:

1. To provide the assessment tool for the calculation of risk an organization is facing.

2. To give a solution in free for the entire audience.

3. To identify and prioritize the risk factors.

4. To help learning the organizations about the risks they could face in the future.

5. This helps the organizations to plan for their future risk management.

Technical Details of Final Deliverable

The end product will be a web-based tool which:

• Identifies risks which can affect the organizations.

• Prioritize the risks factors.

• A tool for cyber security.

Final Deliverable of the Project

Software System

Type of Industry

Security

Technologies

Others

Sustainable Development Goals

Decent Work and Economic Growth, Industry, Innovation and Infrastructure

Required Resources

If you need this project, please contact me on contact@adikhanofficial.com