CLOUD COMPUTING CYBERSECURITY MATRIX WITH OVERLAID MATURITY MODEL
An example computer system for providing a maturity model can include: one or more processors; and non-transitory computer-readable storage media encoding instructions which, when executed by the one or more processors, causes the computer system to: use a cloud computing cybersecurity matrix that organizes a suite of cybersecurity capabilities associated with a cloud computing environment; overlay the maturity model onto the cloud computing cybersecurity matrix, the maturity model measuring a maturity level of technologies associated with the cloud computing environment; and display a dashboard showing the cloud computing cybersecurity matrix with the maturity model overlaid thereon.
1 . A computer system for providing a maturity model, comprising:
one or more processors; and
non-transitory computer-readable storage media encoding instructions which, when executed by the one or more processors, causes the computer system to:
use a cloud computing cybersecurity matrix that organizes a suite of cybersecurity capabilities associated with a cloud computing environment; and
overlay the maturity model onto the cloud computing cybersecurity matrix, the maturity model measuring a maturity level of cloud security capabilities and enabling technologies associated with the cloud computing environment.
2 . The computer system of claim 1 , wherein the cloud computing cybersecurity matrix includes technology tiers specific to the cloud computing environment.
3 . The computer system of claim 2 , wherein the technology tiers include one or more of: identity; data; applications and workloads; services; and infrastructure.
4 . The computer system of claim 1 , wherein the maturity level includes a maturity scale to rate each of the cloud security capabilities and enabling technologies associated with the cloud computing environment.
5 . The computer system of claim 4 , wherein the maturity scale has maturity tiers including: traditional, with capabilities leveraging manual processes with minimal integration, static security, and limited visibility; advanced, with capabilities leveraging some automation and integration of processes, conditional policies, and centralized visibility; and optimal, with fully automated processes, conditional and dynamic policies, and comprehensive visibility.
6 . The computer system of claim 1 , comprising further instructions which, when executed by the one or more processors, causes the computer system to display a dashboard showing the cloud computing cybersecurity matrix with the maturity model overlaid thereon.
7 . The computer system of claim 6 , wherein the dashboard further includes: a current maturity; and a percentage completion for each maturity level.
8 . The computer system of claim 6 , wherein the dashboard is configured to receive an automated feed of current prioritizations and capabilities for the cloud computing environment.
9 . The computer system of claim 1 , comprising further instructions which, when executed by the one or more processors, causes the computer system to use one or more benchmarks to rate the maturity level of the cloud security capabilities and enabling technologies associated with the cloud computing environment.
10 . The computer system of claim 9 , wherein the one or more benchmarks are based upon one or more of: industry standards; competitor standard; and priorities and risks.
11 . A method for providing a maturity model, comprising:
using a cloud computing cybersecurity matrix that organizes a suite of cybersecurity capabilities associated with a cloud computing environment;
overlaying the maturity model onto the cloud computing cybersecurity matrix, the maturity model measuring a maturity level of cloud security capabilities and enabling technologies associated with the cloud computing environment; and
displaying a dashboard showing the cloud computing cybersecurity matrix with the maturity model overlaid thereon.
12 . The method of claim 11 , wherein the cloud computing cybersecurity matrix includes technology tiers specific to the cloud computing environment.
13 . The method of claim 12 , wherein the technology tiers include one or more of: identity; data; applications and workloads; services; and infrastructure.
14 . The method of claim 11 , wherein the maturity level includes a maturity scale to rate each of the cloud security capabilities and enabling technologies associated with the cloud computing environment.
15 . The method of claim 14 , wherein the maturity scale has maturity tiers including: traditional, with capabilities leveraging manual processes with minimal integration, static security, and limited visibility; advanced, with capabilities leveraging some automation and integration of processes, conditional policies, and centralized visibility; and optimal, with fully automated processes, conditional and dynamic policies, and comprehensive visibility.
16 . The method of claim 11 , wherein the dashboard further includes the maturity level that is provided for the technology tiers.
17 . The method of claim 16 , wherein the dashboard further includes: a current maturity; and a percentage completion for each maturity level.
18 . The method of claim 11 , wherein the dashboard is configured to receive an automated feed of current prioritizations and capabilities for the cloud computing environment.
19 . The method of claim 11 , further comprising using one or more benchmarks to rate the maturity level of the cloud security capabilities and enabling technologies associated with the cloud computing environment.
20 . The method of claim 19 , wherein the one or more benchmarks are based upon one or more of: industry standards; competitor standard; and priorities and risks.