Cybersecurity Assurance: Creating Justified Confidence

Fact Sheet
By
Robust measurement of capability maturity and realistic technical vulnerability assessment to truly understand ability to withstand cyber-attack.
Publisher

Software Engineering Institute

Abstract

Carnegie Mellon University Software Engineering Institute’s Cybersecurity Assurance capabilities help organizations answer essential questions in the aftermath of a cyber attack, such as

  • How did this attack happen?
  • Are the attackers still in the network?
  • Can we recover our systems?

This comprehensive and integrated approach to cybersecurity is the only viable path to achieving predictability in uncertain times. It comprises capabilities in process assessment, vulnerability assessment, supply chain risk management, and data analytics.