Totally understand your Cyber Security Status.

NIST Cyber Security Framework

NIST develops cybersecurity standards, guidelines, best practices, and other resources to meet the needs of U.S. industry, federal agencies and the broader public.

The NIST framework is used by many organizations globally to manage their Cyber Security controls.

We offer a full NIST framework of controls in our system. This enables any organization that needs to be NIST compliant to have a full system with Risk Action Plans for all each function / category / sub-category criteria.

You can read more about NIST - NIST Cyber Framework.

Easy to set up

Set up how often you wish to do reviews - monthly, quarterly, bi-annually or annually.

Define your team with relevant permissions for access.

Using our assessment templates, simply determine the templates and sub-sets of templates you want to use (CIS 8.0 / NIST).

Then set up your units - these could be subsidiary companies, departments, locations, separate businesses for consultants. Any way you wish to divide organizations.

Once these actions are completed you can start your 1st assessments.

Risk Action Plan

When an assessment is in progress, we dynamically create a Risk Action Plan. This tells you exactly what actions need to be performed, all graded by KPI's, in order to move from a non-conforming to conforming position.

When an assessment is completed, it may be that not all risk areas have been resolved. These remain available to view as a risk register and are actionable at any point, when the next review period comes up the issues can be set as completed.

The Risk Action Plan is a key differentiator of our service, enabling automatic creation of tasks to perform in order to build cyber-resilience.

Risk Matrix

Our risk matrix looks at two axes, Impact and Likelihood. The grid of 25 blocks enables a very quick view of the controls / functions and where they fall in the matrix based on likelihood and impact.

This analysis shows in one glance the areas of concern, colour coded to warn of danger.

All reports, graphs and images can be exported for inclusion in external reports.

Management Dashboard

The ability to look at your cyber-resilience status as an entire organisation is critical for management. Depending on how you have split your organisation - subsidiaries, departments, locations, equipment types, at some point you want to look at the entire organisation and compare across these.

Our management dashboard graphically provides:

• Inherent vs Residual Risk any Unit.
• Event likelihood by Unit.
• NIST Function score by Unit (Both for NIST and CIS based frameworks).
• Residual Risk by Unit across time.

These are key to being able to report on progress (or lack thereof) to the organisation's leaders as required.

Remediation Budgeting / Quotation

This is the critical task, how to budget / quote your client on their remediation. The best way is based on the assessment. We offer a full budget / quotation methodology based on risk and impact.

Build a full remediation cost model with services and products to enable a prioritised and executable plan for remediation.

We cater for services:

• Once off or recurring.
• Assurance / Consulting / Managed Services .
• NIST Function score by Unit (Both for NIST and CIS based frameworks).

We cater for products:

• Our service identifies product types required based on the assessment.
• Products can be Once off or recurring.
• SAAS and Standard .

Once you have a demo, you will understand how CyberXposure can improve your sales process to clients with the deliverables of a Risk Action Plan as well as a Fully detailed Remediation Budget / Quotation to ensure full Cyber Resilience.