Smart Secure: A Novel Risk based Maturity Model for Enterprise Risk Management during Global Pandemic

摘要

With the onset of the global pandemic, organizations have had to embrace digital transformation and adapt to the new normal. Digital transformation has helped global workforce to work from remote locations and ensure business continuity. However, this has also resulted in a significant surge in cyber attacks due to an increase in attack surface and rogue threat actors. Security Leaders and CFOs are facing a taxing challenge to decide on where and how to invest to secure their organizations and perform enterprise cybersecurity risk management in context of the financial constraints that most organizations are facing at the moment. We propose an efficient and risk-based cybersecurity maturity model called “Smart Secure”, for guiding security leaders to perform smart & efficient enterprise risk management. This would help in efficient distribution of available resources for information systems based on level of risk & criticality of the application, for their organization. Thus, providing a solution for efficient cybersecurity funding and prioritization to help improve overall cybersecurity posture for the organization.