Building a Global Cyber Rating - How to Objectively Rate Cyber Capabilities
summary
Proposal builds a blended Global Cyber Rating that combines five data streams — outside‑in scans, inside‑out telemetry and API queries, management self‑attestations, probabilistic CRQ models and scenario stress tests — into an eight‑notch scale mapped to four rubrics: threat, governance, fortitude, and risk. Model uses MITRE ATT&CK and Basel‑style loss buckets, cohort benchmarking and backtesting to link security signals to financial exposure and capital reserve estimates, requires model‑risk controls and third‑party validation, and will publish the full methodology for public comment.
AI-written summary · about
chapters (15)
- 0:00Intro
- 0:40Why a Global Cyber Rating? For whom?
- 1:43Approaches to Cyber Ratings
- 7:12Global Cyber Rating Characteristics
- 8:45Data Collection - Fidelity vs. Effort
- 11:34What is a Model?
- 13:17Model Hierarchy
- 15:32How to model
- 17:55Model Review Process
- 19:06Rating Scales
- 21:46Cyber Rating Model - Establishing Measurements
- 23:34Cyber Rating Model - Diving Deep
- 25:10Cyber Rating Model - Leveraging Scenarios
- 26:28Cyber Rating Model - Considering Peer Groups
- 27:41Takeaways and Next Steps
related talks
26mCybersecurity Risk Assessment for Safety-Critical Systems
28mHow to Tell the Right Cyber-Story to Executives and Board Members
52mBon Appetit: Establishing an Effective Cyber Risk Appetite
22mIntroducing the power of Rating in Cybersecurity
50mBetter Risk Assessment for Cyber Insurance: How Will We Get There?
38mCyber risk management: Bringing security to the boardroom
22mUsing Cyber Data To Financially Quantify Cyber Risk Decisions
29mMeasuring Cybersecurity Maturity with the NIST CSF