Assessing the Maturity of National Cybersecurity and Resilience
by
George Sharkov

Abstract:

This article provides an overview of maturity levels and assessment methodologies for the evaluation of cybersecurity and resilience in relation to their applicability and usefulness at sectoral and national levels. Reference maturity models and assessment frameworks, such as CERT Resilience Management Model, Cybersecurity Capacity Maturity Model for Nations, C2M2 (Cybersecurity Capability Maturity Model), are compared and analyzed for their applicability in designing and implementing national cybersecurity strategies and programs to achieve cyber resilience. Cyber readiness indexes are also outlined in view of their use to indicate possible improvements. The author explores the development of national cybersecurity strategies with a focus on cyber maturity and provides examples. A maturity-based approach for the Bulgarian cyber resilience roadmap is also described within the context of the evolving cyber-empowered hybrid threats and the need for an institutionalized collaborative public-private resilience.

Previous Issue

The Fall 2016 issue of Connections is dedicated to the NATO Summit that took place in Warsaw, Poland in July 2016. During the Summit, heads of state and government of allied and partner countries discussed key security challenges. This journal issue takes a deep look into two key themes - assuring the security of the Alliance in view of the hybrid ... Read More