INFORMATION SECURITY THREAT MANAGEMENT SYSTEM

摘要

The invention relates to a system and method of monitoring the security compliance of a system of ICT assets based on a security posture characterisation. The method includes a data structure linking ICT assets, an ICT asset type characterisation, one or more ICT threats linked to the asset type characterisation, and one or more ICT security controls linked to the CT threats. In some implementations, the data structure further includes further data operable for determination of a probability of a security threat occurring, and identification of one or more security controls for implementation on one more linked assets to improve the security posture.