US 11,659,048 B2
Cybersecurity maturity assessment
Edward Douglas Grindstaff, II, Nashville, TN (US); Matthew Stuart Loeb, Barrington, IL (US); Kelly Hood, Columbia, MD (US); Greg Witte, Churchton, MD (US); and Thomas Conkle, Pasadena, MD (US)
Assigned to CMMI Institute, LLC, Pittsburgh, PA (US)
Filed by CMMI Institute, LLC, Pittsburgh, PA (US)
Filed on Aug. 26, 2022, as Appl. No. 17/896,595.
Application 17/896,595 is a continuation of application No. 16/226,117, filed on Dec. 19, 2018, granted, now 11,429,726.
Claims priority of provisional application 62/620,979, filed on Jan. 23, 2018.
Prior Publication US 2022/0414232 A1, Dec. 29, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/57 (2013.01); G06F 9/54 (2006.01); G06F 9/451 (2018.01); H04L 67/30 (2022.01); H04L 67/303 (2022.01); G06F 18/2415 (2023.01)
CPC G06F 21/577 (2013.01) [G06F 9/451 (2018.02); G06F 9/542 (2013.01); G06F 18/2415 (2023.01); H04L 67/30 (2013.01); H04L 67/303 (2013.01); G06F 2221/034 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer implemented method, comprising:
receiving, via a user interface, a risk profile comprising a likelihood and/or impact for each event of a selected group of events of a plurality of pre-defined potential events related to a plurality of pre-defined potential vulnerabilities of a computer system; and
computing a maturity measurement for the computer system using the risk profile and a database, the database comprising information for a set of practices and relationships between practices of the set of practices and events of the plurality of pre-defined potential events,
wherein computing the maturity measurement for the computer system is based on at least a plurality of predefined maturity levels;
wherein the predefined maturity level for each practice of the set of practices is one of five levels of maturity, the five levels of maturity comprising an initial level of maturity (“performed level”), a repeatable level of maturity (“managed level”), a defined level of maturity (“defined level”), a capable level of maturity (“quantitatively managed level”), and an efficient level of maturity (“optimized level”).