Abstract: An analysis unit of an analysis system includes a data module and an analyze and score module. The data module receives data analysis parameters regarding a particular evaluation of a system, determines data collection parameters and data parsing parameters, interacts with a collection of data to collect data relevant to the particular evaluation, based upon the data parsing parameters, parses the data relevant to the particular evaluation to produce source data. The analyze and score module receives the data analysis parameters regarding the particular evaluation, determines a system aspect, an evaluation aspect, one or more evaluation metrics, one or more evaluation modes, and one or more evaluation perspectives, and evaluates the source data in accordance with the system aspect, the evaluation aspect, the one or more evaluation metrics, the one or more evaluation modes, and the one or more evaluation perspectives to produce one or more evaluation outputs including ratings.

Abstract: A method includes determining, by an analysis system, a system aspect of a system for a protection evaluation. The method further includes determining, by the analysis system, at least one evaluation perspective for use in performing the protection evaluation on the system aspect. The method further includes determining, by the analysis system, at least one evaluation viewpoint for use in performing the protection analysis on the system aspect. The method further includes obtaining, by the analysis system, protection data regarding the system aspect in accordance with the at least one evaluation perspective and the at least one evaluation viewpoint. The method further includes calculating, by the analysis system, a protection rating as a measure of protection maturity for the system aspect based on the protection data, the at least one evaluation perspective, the at least one evaluation viewpoint, and at least one evaluation rating metric.

Abstract: An analysis system includes a control module generates data gathering parameters and data analysis parameters based on one or more inputs regarding an evaluation of a system aspect under test of a system, a data input module receives system gathered data regarding the system aspect under test to produce gathered data, and a data analysis module configured to generate the evaluation of the system aspect under test based on the data analysis parameters and the gathered data One or more databases store one or more of the gathered data, the data analysis parameters, and the evaluation of the system aspect under test and one or more data extraction modules interact with the system aspect under test to extract data from the system aspect under test in accordance with a respective portion of the data gathering parameters to produce the system gathered data and provide the system gathered data.

Abstract: A method includes determining a system aspect of a system for asset management evaluation. The method further includes determining at least one evaluation perspective for use in performing the asset management evaluation on the system aspect. The method further includes determining at least one evaluation viewpoint for use in performing the asset management evaluation on the system aspect. The method further includes obtaining asset management data regarding the system aspect in accordance with the at least one evaluation perspective and the at least one evaluation viewpoint. The method further includes calculating an asset management rating as a measure of system asset management maturity for the system aspect based on the asset management data, the at least one evaluation perspective, the at least one evaluation viewpoint, and at least one evaluation rating metric.

Abstract: A method includes determining, by an analysis system, a system aspect of a system for a continuous security monitoring evaluation. The method further includes determining, by the analysis system, at least one evaluation perspective and at least one evaluation viewpoint for use in performing the continuous security monitoring evaluation on the system aspect. The method further includes obtaining, by the analysis system, continuous security monitoring data regarding the system aspect in accordance with the at least one evaluation perspective and the at least one evaluation viewpoint. The method further includes calculating, by the analysis system, a continuous security monitoring rating as a measure of system continuous security monitoring maturity for the system aspect based on the continuous security monitoring data, the at least one evaluation perspective, the at least one evaluation viewpoint, and at least one evaluation rating metric.

Abstract: A method includes determining, by an analysis system, a system aspect of a system for a protection evaluation. The method further includes determining, by the analysis system, at least one evaluation perspective for use in performing the protection evaluation on the system aspect. The method further includes determining, by the analysis system, at least one evaluation viewpoint for use in performing the protection analysis on the system aspect. The method further includes obtaining, by the analysis system, protection data regarding the system aspect in accordance with the at least one evaluation perspective and the at least one evaluation viewpoint. The method further includes calculating, by the analysis system, a protection rating as a measure of protection maturity for the system aspect based on the protection data, the at least one evaluation perspective, the at least one evaluation viewpoint, and at least one evaluation rating metric.

Abstract: A method includes determining, by an analysis system, a system aspect of a system for a protection evaluation. The method further includes determining, by the analysis system, at least one evaluation perspective for use in performing the protection evaluation on the system aspect. The method further includes determining, by the analysis system, at least one evaluation viewpoint for use in performing the protection analysis on the system aspect. The method further includes obtaining, by the analysis system, protection data regarding the system aspect in accordance with the at least one evaluation perspective and the at least one evaluation viewpoint. The method further includes calculating, by the analysis system, a protection rating as a measure of protection maturity for the system aspect based on the protection data, the at least one evaluation perspective, the at least one evaluation viewpoint, and at least one evaluation rating metric.

Abstract: A method includes determining, by an analysis system, a system aspect of a system for an issue response analysis evaluation. The method further includes determining, by the analysis system, at least one evaluation perspective and at least one evaluation viewpoint for use in performing the issue response analysis evaluation on the system aspect. The method further includes obtaining, by the analysis system, issue response analysis data regarding the system aspect in accordance with the at least one evaluation perspective and the at least one evaluation viewpoint. The method further includes calculating, by the analysis system, an issue response analysis rating as a measure of system issue response analysis maturity for the system aspect based on the issue response analysis data, the at least one evaluation perspective, the at least one evaluation viewpoint, and at least one evaluation rating metric.

Abstract: Embodiments of the present disclosure are directed to a number of systems, apparatuses, and methods for scoring, rating, the cyber-security of a network, and the configuration, control, and remediation, thereof. Accordingly, in some embodiments, a network security evaluation method is provided which may comprise operating an investigatory container (IC) with access to a first network (FN), and retrieving first data by the IC from a source external to the FN. The first data can correspond to at least one of an inventory of security devices provided on the FN, plug-in module information for each security device provided on the FN, each plug-in module configured to allow the IC to communicate with a respective security device of the FN, and login information associated with each security device of the FN.

Abstract: A method for execution by an analysis unit includes obtaining a collection of data for a particular evaluation of a system aspect. The method further includes acquiring data analysis parameters regarding the particular evaluation of the system aspect. The method further includes determining one or more evaluation perspectives based on the data analysis parameters. The method further includes determining one or more evaluation modalities based on the data analysis parameters. The method further includes determining one or more evaluation metrics based on the data analysis parameters. The method further includes evaluating the collection of data in accordance with the one or more evaluation metrics, the one or more evaluation perspectives, and the one or more evaluation modalities to produce one or more evaluation outputs.

Abstract: A method for execution by an analysis unit includes obtaining a collection of data for a particular evaluation of a system aspect. The method further includes acquiring data analysis parameters regarding the particular evaluation of the system aspect. The method further includes determining one or more evaluation perspectives based on the data analysis parameters. The method further includes determining one or more evaluation modalities based on the data analysis parameters. The method further includes determining one or more evaluation metrics based on the data analysis parameters. The method further includes evaluating the collection of data in accordance with the one or more evaluation metrics, the one or more evaluation perspectives, and the one or more evaluation modalities to produce one or more evaluation outputs.

Abstract: A method includes determining, by an analysis system, a system sector of a system for an asset evaluation. The method further includes determining, by the analysis system, at least one evaluation perspective for use in performing the asset evaluation on the system sector. The method further includes determining, by the analysis system, at least one evaluation viewpoint for use in performing the asset evaluation on the system aspect. The method further includes obtaining, by the analysis system, asset data regarding the system aspect in accordance with the at least one evaluation perspective and the at least one evaluation viewpoint. The method further includes calculating, by the analysis system, an asset evaluation rating as a measure of system asset maturity for the system aspect based on the asset data, the at least one evaluation perspective, the at least one evaluation viewpoint, and at least one evaluation rating metric.

Abstract: A method includes determining, by an analysis system, a system sector of a system for an asset evaluation. The method further includes determining, by the analysis system, at least one evaluation perspective for use in performing the asset evaluation on the system sector. The method further includes determining, by the analysis system, at least one evaluation viewpoint for use in performing the asset evaluation on the system aspect. The method further includes obtaining, by the analysis system, asset data regarding the system aspect in accordance with the at least one evaluation perspective and the at least one evaluation viewpoint. The method further includes calculating, by the analysis system, an asset evaluation rating as a measure of system asset maturity for the system aspect based on the asset data, the at least one evaluation perspective, the at least one evaluation viewpoint, and at least one evaluation rating metric.

Abstract: An analysis system includes a control module generates data gathering parameters and data analysis parameters based on one or more inputs regarding an evaluation of a system aspect under test of a system, a data input module receives system gathered data regarding the system aspect under test to produce gathered data, and a data analysis module configured to generate the evaluation of the system aspect under test based on the data analysis parameters and the gathered data One or more databases store one or more of the gathered data, the data analysis parameters, and the evaluation of the system aspect under test and one or more data extraction modules interact with the system aspect under test to extract data from the system aspect under test in accordance with a respective portion of the data gathering parameters to produce the system gathered data and provide the system gathered data.

Abstract: A method includes determining, by an analysis system, a system sector of a system for function evaluation. The method further includes determining, by the analysis system, at least one evaluation perspective for use in performing the function evaluation on the system sector. The method further includes determining, by the analysis system, at least one evaluation viewpoint for use in performing the function evaluation on the system sector. The method further includes obtaining, by the analysis system, function data regarding the system sector in accordance with the at least one evaluation perspective and the at least one evaluation viewpoint. The method further includes calculating, by the analysis system, a function evaluation rating as a measure of function maturity for the system sector based on the function data, the at least one evaluation perspective, the at least one evaluation viewpoint, and at least one evaluation rating metric.

Abstract: A method includes determining, by an analysis system, a system aspect of a system for an issue response planning evaluation. The method further includes determining, by the analysis system, at least one evaluation perspective and at least one evaluation viewpoint for use in performing the issue response planning evaluation on the system aspect. The method further includes obtaining, by the analysis system, issue response planning data regarding the system aspect in accordance with the at least one evaluation perspective and the at least one evaluation viewpoint. The method further includes calculating, by the analysis system, an issue response planning rating as a measure of system issue response planning maturity for the system aspect based on the issue response planning data, the at least one evaluation perspective, the at least one evaluation viewpoint, and at least one evaluation rating metric.

Abstract: A method includes determining, by an analysis system, a system aspect of a system for an issue detection evaluation. The method further includes determining, by the analysis system, at least one evaluation perspective for use in performing the issue detection evaluation on the system aspect. The method further includes determining, by the analysis system, at least one evaluation viewpoint for use in performing the issue detection evaluation on the system aspect. The method further includes obtaining, by the analysis system, issue detection data regarding the system aspect in accordance with the at least one evaluation perspective and the at least one evaluation viewpoint. The method further includes calculating, by the analysis system, an issue detection rating as a measure of system issue detection maturity for the system aspect based on the issue detection data, the at least one evaluation perspective, the at least one evaluation viewpoint, and at least one evaluation rating metric.

Abstract: A method includes determining, by an analysis system, a system sector of a system for function evaluation. The method further includes determining, by the analysis system, at least one evaluation perspective for use in performing the function evaluation on the system sector. The method further includes determining, by the analysis system, at least one evaluation viewpoint for use in performing the function evaluation on the system sector. The method further includes obtaining, by the analysis system, function data regarding the system sector in accordance with the at least one evaluation perspective and the at least one evaluation viewpoint. The method further includes calculating, by the analysis system, a function evaluation rating as a measure of function maturity for the system sector based on the function data, the at least one evaluation perspective, the at least one evaluation viewpoint, and at least one evaluation rating metric.

Abstract: A method includes determining, by an analysis system, a system aspect of a system for an anomaly and event awareness evaluation. The method further includes determining, by the analysis system, at least one evaluation perspective and at least one evaluation viewpoint for use in performing the anomaly and event awareness evaluation on the system aspect. The method further includes obtaining, by the analysis system, anomaly and event awareness data regarding the system aspect in accordance with the at least one evaluation perspective and the at least one evaluation viewpoint. The method further includes calculating, by the analysis system, an anomaly and event awareness rating as a measure of system anomaly and event awareness maturity for the system aspect based on the anomaly and event awareness data, the at least one evaluation perspective, the at least one evaluation viewpoint, and at least one evaluation rating metric.

Abstract: A method includes determining, by an analysis system, a system aspect of a system for an issue recovery plan evaluation. The method further includes determining, by the analysis system, at least one evaluation perspective and at least one evaluation viewpoint for use in performing the issue recovery plan evaluation on the system aspect. The method further includes obtaining, by the analysis system, issue recovery plan data regarding the system aspect in accordance with the at least one evaluation perspective and the at least one evaluation viewpoint. The method further includes calculating, by the analysis system, an issue recovery plan rating as a measure of system issue recovery plan maturity for the system aspect based on the issue recovery plan data, the at least one evaluation perspective, the at least one evaluation viewpoint, and at least one evaluation rating metric.