Cyber hygiene self-assessment maturity tool

网络卫生自我评估成熟度工具

• 批准号: 10076973
• 金额: $ 3.4万
• 依托单位: UNIVERSITY OF ESSEX
• 依托单位国家: 英国
• 项目类别: Collaborative R&D
• 财政年份: 2023
• 资助国家: 英国
• 起止时间: 2023 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=10076973
• 关键词: Cyber; hygiene; self; assessment; maturity

Cyber hygiene is defined as the practices that should be implemented and carried out regularly to protect users and businesses online. Cyber security is crucial for empowering small and medium enterprises (SMEs) as cyber incidents are the number one technology threat to businesses, involving severe disruptions or can potentially lead to closure. This is because most SMEs face substantial challenges in terms of the capability and resources to plan and implement cyber security-related practices, and existing solutions mainly target large corporations and require significant resources.This project will develop a novel cyber hygiene self-assessment maturity tool to empower SMEs to improve their cyber posture. The tool will support continuous and dynamic cyber hygiene assessment and a progressive maturity score that will support organisations to track their maturity progress over a period of time, providing a comprehensive (IT, processes, operation) assessment focusing on all elements of an SME that generate revenue for the organisation. The tool will feature recommendations and specific guidance in plain language so that it is understood by SME managers and does not require the hiring of external consultants or experts to implement the relevant cyber hygiene practices.

网络卫生被定义为为保护在线用户和企业而应定期实施和执行的做法。网络安全对于增强中小企业 (SME) 的能力至关重要，因为网络事件是企业面临的头号技术威胁，会造成严重破坏或可能导致企业倒闭。这是因为大多数中小企业在规划和实施网络安全相关实践的能力和资源方面面临着巨大的挑战，而现有的解决方案主要针对大型企业并需要大量资源。该项目将开发一种新颖的网络卫生自我评估成熟度工具帮助中小企业改善其网络状况。该工具将支持持续、动态的网络卫生评估和渐进式成熟度评分，支持组织在一段时间内跟踪其成熟度进度，提供全面的（IT、流程、运营）评估，重点关注中小企业的所有要素，从而产生该组织的收入。该工具将以通俗易懂的语言提供建议和具体指导，以便中小企业管理者能够理解，并且不需要聘请外部顾问或专家来实施相关的网络卫生实践。