Systems and methods for cybersecurity tokenization

1. A method for modeling data using cyber resilience identities and associated metadata, the method comprising:

receiving or identifying, by one or more processing circuits, cyber resilience data;

encrypting, by the one or more processing circuits, a portion of the cyber resilience data;

generating, by the one or more processing circuits, a metadata object comprising metadata of the cyber resilience data;

generating, by the one or more processing circuits, a cyber resilience identity comprising at least a link with the metadata object, a unique identifier (UID), and a performance event dataset;

encapsulating, by the one or more processing circuits, the cyber resilience identity within a control structure restricting one or more updates and redemptions of the metadata object;

determining, by the one or more processing circuits, at least one access data structure being compatible with the control structure; and

broadcasting, by the one or more processing circuits using the control structure, the cyber resilience identity to a ledger or distributed ledger.

2. The method of claim 1 , wherein the control structure comprises a verification function of to restrict the one or more updates and redemptions of the metadata object, the verification function executable by the control structure to validate one or more of the one or more updates and redemptions of the metadata object by verifying one or more cryptographic proofs of authorization of a plurality of authorized entities prior to updating the cyber resilience identity.

3. The method of claim 2 , further comprising:

receiving or identifying, by the one or more processing circuits, additional cyber resilience data of an entity corresponding to the cyber resilience identity;

receiving, by the one or more processing circuits, at least one cryptographic proof of provenance of the additional cyber resilience data;

verifying, by the one or more processing circuits using the verification function of the control structure, the at least one cryptographic proof of provenance;

updating, by the one or more processing circuits using the control structure, the cyber resilience identity by updating the metadata object or appending the additional cyber resilience data to the performance event dataset; and

broadcasting, by the one or more processing circuits using the control structure, the updated cyber resilience identity to the ledger or the distributed ledger.

4. The method of claim 1 , further comprising:

receiving, by the one or more processing circuits from an entity computing system of an entity corresponding to the cyber resilience identity or from an authorized entity computing system corresponding to an authorized entity of a plurality of authorized entities, an access request for the cyber resilience identity, the access request comprising the at least one access data structure;

verifying, by the one or more processing circuits using the control structure, the at least one access data structure;

granting, by the one or more processing circuits, access to the metadata object and the performance event dataset within the cyber resilience identity to the entity or the authorized entity;

decrypting, by the one or more processing circuits, the metadata object; and

providing, by the one or more processing circuits, the access to the metadata object and the performance event dataset by facilitating retrieval using a secure interface between the one or more processing circuits and the entity computing system or the authorized entity computing system.

5. The method of claim 1 , wherein the cyber resilience identity is a data structure encapsulating a plurality of resilience tokens, each of the plurality of resilience tokens corresponding to a cybersecurity dimension of a posture of an entity corresponding to the cyber resilience identity, the plurality of resilience tokens comprising at least:

at least one unified token comprising the cyber resilience data captured over a period of time;

at least one evaluation token comprising the cyber resilience data captured at a plurality of points in time over the period of time; and

at least one roll-up token comprising data of the at least one unified token and at least one real-time token corresponding with a security performance of the entity over the period of time.

6. The method of claim 5 , wherein the at least one unified token comprises:

a unified safeguard token comprising data of implemented safeguards and configurations over the period of time;

a unified requirements token comprising data of entity-specific requirements and third-party requirements over the period of time;

a unified asset token comprising data of a plurality of assets of the entity over the period of time; or

a unified attestation token comprising data of entity attestations over the period of time.

7. The method of claim 5 , wherein the at least one real-time token comprises:

a plurality of evaluation tokens comprising data of at least one of a posture of the entity, a state of the entity, or a protection of the entity at a point in time of the plurality of points in time over the period of time.

8. The method of claim 1 , further comprising:

generating, by the one or more processing circuits, the at least one access data structure for at least one of an entity computing system of an entity corresponding to the cyber resilience identity or an authorized entity computing system corresponding to an authorized entity of a plurality of authorized entities; or

receiving, by the one or more processing circuits from at least one of the entity computing system or the authorized entity computing system, the at least one access data structure.

9. The method of claim 8 , wherein the least one access data structure comprises a token, key, certificate, or access mechanism, and wherein determining the at least one access data structure being compatible with the control structure comprises:

in response to receiving the at least one access data structure, configuring the at least one access data structure by updating the control structure to enforce restricting the one or more updates and redemptions of the metadata object, wherein updating the control structure comprises updating one or more access parameters of the control structure; or

in response to generating the at least one access data structure, providing, by the one or more processing circuits to the entity computing system or the authorized entity computing system, the at least one access data structure.

10. The method of claim 1 , wherein the cyber resilience data comprises at least one of firmographics data, safeguard data, performance data, policy data, incident data, or claims data, and wherein the control structure comprises a smart contract.

11. A system for modeling cyber resilience data using cyber resilience identities and associated metadata, the system comprising:

one or more processing circuits configured to:

receive or identify cyber resilience data;

encrypt a portion of the cyber resilience data;

generate a metadata object comprising metadata of the cyber resilience data;

generate a cyber resilience identity comprising at least a link with the metadata object, a unique identifier (UID), and a performance event dataset;

encapsulate the cyber resilience identity within a control structure restricting one or more updates and redemptions of the metadata object;

determine at least one access data structure being compatible with the control structure; and

broadcast, using the control structure, the cyber resilience identity to a ledger or distributed ledger.

12. The system of claim 11 , wherein the control structure comprises a verification function to restrict the one or more updates and redemptions of the metadata object, the verification function executable by the control structure to validate one or more of the one or more updates and redemptions of the metadata object by verifying one or more cryptographic proofs of authorization of a plurality of authorized entities prior to updating the cyber resilience identity.

13. The system of claim 12 , the one or more processing circuits further configured to:

receive or identify additional cyber resilience data of an entity corresponding to the cyber resilience identity;

receive at least one cryptographic proof of provenance of the additional cyber resilience data;

verify, using the verification function of the control structure, the at least one cryptographic proof of provenance;

update, using the control structure, the cyber resilience identity by updating the metadata object or appending the additional cyber resilience data to the performance event dataset; and

broadcast, using the control structure, the updated cyber resilience identity to the ledger or the distributed ledger.

14. The system of claim 11 , the one or more processing circuits further configured to:

receive, from an entity computing system of an entity corresponding to the cyber resilience identity or from an authorized entity computing system corresponding to an authorized entity of a plurality of authorized entities, an access request for the cyber resilience identity, the access request comprising the at least one access data structure;

verify, using the control structure, the at least one access data structure;

grant access to the metadata object and the performance event dataset within the cyber resilience identity to the entity or the authorized entity;

decrypt the metadata object; and

provide access to the metadata object and the performance event dataset by facilitating retrieval using a secure interface between the one or more processing circuits and the entity computing system or the authorized entity computing system.

15. The system of claim 11 , wherein the cyber resilience identity is a data structure encapsulating a plurality of resilience tokens, each of the plurality of resilience tokens corresponding to a cybersecurity dimension of a posture of an entity corresponding to the cyber resilience identity, the plurality of resilience tokens comprising at least:

at least one unified token comprising the cyber resilience data captured over a period of time;

at least one evaluation token comprising the cyber resilience data captured at a plurality of points in time over the period of time; and

at least one roll-up token comprising data of the at least one unified token and at least one real-time token corresponding with a security performance of the entity over the period of time.

16. The system of claim 15 , wherein the at least one unified token comprises:

a unified safeguard token comprising data of implemented safeguards and configurations over the period of time;

a unified requirements token comprising data of entity-specific requirements and third-party requirements over the period of time;

a unified asset token comprising data of a plurality of assets of the entity over the period of time; or

a unified attestation token comprising data of entity attestations over the period of time.

17. The system of claim 15 , wherein the at least one real-time token comprises:

a plurality of evaluation tokens comprising data of at least one of a posture of the entity, a state of the entity, or a protection of the entity at a point in time of the plurality of points in time over the period of time.

18. The system of claim 11 , the one or more processing circuits further configured to:

generate the at least one access data structure for at least one of an entity computing system of an entity corresponding to the cyber resilience identity or an authorized entity computing system corresponding to an authorized entity of a plurality of authorized entities; or

receive, from at least one of the entity computing system or the authorized entity computing system, the at least one access data structure.

19. The system of claim 18 , wherein the least one access data structure comprises a token, key, certificate, or access mechanism, and wherein the one or more processing circuits are further configured to, in determining the at least one access data structure being compatible with the control structure:

in response to receiving the at least one access data structure, configure the at least one access data structure by updating the control structure to enforce restricting the one or more updates and redemptions of the metadata object, wherein updating the control structure comprises updating one or more access parameters of the control structure; or

in response to generating the at least one access data structure, provide, to the entity computing system or the authorized entity computing system, the at least one access data structure.

20. A non-transitory computer readable medium (CRM) comprising one or more instructions stored thereon and executable by one or more processors to:

receive or identify cyber resilience data;

encrypt a portion of the cyber resilience data;

generate a metadata object comprising metadata of the cyber resilience data;

generate a cyber resilience identity comprising at least a link with the metadata object, a unique identifier (UID), and a performance event dataset;

encapsulate the cyber resilience identity within a control structure restricting one or more updates and redemptions of the metadata object;

determine at least one access data structure being compatible with the control structure; and

broadcast, using the control structure, the cyber resilience identity to a ledger or distributed ledger.