Patents Assigned to Secure Systems Innovation Corporation
-
Publication number: 20230122830Abstract: A computer-implemented method of identifying and mitigating information security risks may be provided. The method may involve an operator receiving control implementation inputs and historical and cyber risk intelligence control effectiveness data and combining the historical and cyber risk intelligence control effectiveness data and the operator control implementation input to determine a control effectiveness measurement for each of a plurality of risk scenarios. The determined control effectiveness measurement results may be aggregated for each of a plurality of controls for the plurality of risk scenario, a control effectiveness simulation model may be generated, and a control effectiveness simulation model summary may be outputted.Type: ApplicationFiled: October 12, 2022Publication date: April 20, 2023Applicant: Secure Systems Innovation CorporationInventor: Robert VESCIO
-
Publication number: 20220335349Abstract: A method and system for risk measurement and modeling, which may be used to identify and mitigate information security risks for an information system, and which may improve the efficiency of risk measurement and modeling. Such a system may perform risk modeling based on threat likelihood information, the potential business impacts of particular threats, and data on the effectiveness of particular controls implemented by the operators of the information system, which may be used to calculate residual risk scores for particular risk scenarios that the information system may face.Type: ApplicationFiled: May 31, 2022Publication date: October 20, 2022Applicant: Secure Systems Innovation CorporationInventor: Robert Vescio
-
Publication number: 20220270009Abstract: A method and system for risk measurement and modeling, which may be used to identify and mitigate information security risks for an information system, and which may improve the efficiency of risk measurement and modeling. Such a system may perform risk modeling based on threat likelihood information, the potential business impacts of particular threats, and data on the effectiveness of particular controls implemented by the operators of the information system, which may be used to calculate residual risk scores for particular risk scenarios that the information system may face.Type: ApplicationFiled: February 10, 2022Publication date: August 25, 2022Applicant: Secure Systems Innovation CorporationInventor: Robert VESCIO
-
Patent number: 11379773Abstract: A method and system for risk measurement and modeling, which may be used to identify and mitigate information security risks for an information system, and which may improve the efficiency of risk measurement and modeling. Such a system may perform risk modeling based on threat likelihood information, the potential business impacts of particular threats, and data on the effectiveness of particular controls implemented by the operators of the information system, which may be used to calculate residual risk scores for particular risk scenarios that the information system may face.Type: GrantFiled: July 31, 2019Date of Patent: July 5, 2022Assignee: Secure Systems Innovation CorporationInventor: Robert Vescio
-
Patent number: 11282018Abstract: A method and system for risk measurement and modeling, which may be used to identify and mitigate information security risks for an information system, and which may improve the efficiency of risk measurement and modeling. Such a system may perform risk modeling based on threat likelihood information, the potential business impacts of particular threats, and data on the effectiveness of particular controls implemented by the operators of the information system, which may be used to calculate residual risk scores for particular risk scenarios that the information system may face.Type: GrantFiled: October 21, 2019Date of Patent: March 22, 2022Assignee: Secure Systems Innovation CorporationInventor: Robert Vescio
-
Publication number: 20200050986Abstract: A method and system for risk measurement and modeling, which may be used to identify and mitigate information security risks for an information system, and which may improve the efficiency of risk measurement and modeling. Such a system may perform risk modeling based on threat likelihood information, the potential business impacts of particular threats, and data on the effectiveness of particular controls implemented by the operators of the information system, which may be used to calculate residual risk scores for particular risk scenarios that the information system may face.Type: ApplicationFiled: October 21, 2019Publication date: February 13, 2020Applicant: Secure Systems Innovation CorporationInventor: Robert VESCIO
-
Publication number: 20190362280Abstract: A method and system for risk measurement and modeling, which may be used to identify and mitigate information security risks for an information system, and which may improve the efficiency of risk measurement and modeling. Such a system may perform risk modeling based on threat likelihood information, the potential business impacts of particular threats, and data on the effectiveness of particular controls implemented by the operators of the information system, which may be used to calculate residual risk scores for particular risk scenarios that the information system may face.Type: ApplicationFiled: July 31, 2019Publication date: November 28, 2019Applicant: Secure Systems Innovation CorporationInventor: Robert VESCIO
-
Patent number: 10453016Abstract: A method and system for risk measurement and modeling, which may be used to identify and mitigate information security risks for an information system, and which may improve the efficiency of risk measurement and modeling. Such a system may perform risk modeling based on threat likelihood information, the potential business impacts of particular threats, and data on the effectiveness of particular controls implemented by the operators of the information system, which may be used to calculate residual risk scores for particular risk scenarios that the information system may face.Type: GrantFiled: July 17, 2017Date of Patent: October 22, 2019Assignee: Secure Systems Innovation CorporationInventor: Robert Vescio
-
Patent number: 10395201Abstract: A method and system for risk measurement and modeling, which may be used to identify and mitigate information security risks for an information system, and which may improve the efficiency of risk measurement and modeling. Such a system may perform risk modeling based on threat likelihood information, the potential business impacts of particular threats, and data on the effectiveness of particular controls implemented by the operators of the information system, which may be used to calculate residual risk scores for particular risk scenarios that the information system may face.Type: GrantFiled: July 17, 2017Date of Patent: August 27, 2019Assignee: Secure Systems Innovation CorporationInventor: Robert Vescio
-
Publication number: 20180069882Abstract: A method and system for risk measurement and modeling, which may be used to identify and mitigate information security risks for an information system, and which may improve the efficiency of risk measurement and modeling. Such a system may perform risk modeling based on threat likelihood information, the potential business impacts of particular threats, and data on the effectiveness of particular controls implemented by the operators of the information system, which may be used to calculate residual risk scores for particular risk scenarios that the information system may face.Type: ApplicationFiled: July 17, 2017Publication date: March 8, 2018Applicant: Secure Systems Innovation CorporationInventor: Robert VESCIO
-
Publication number: 20180068243Abstract: A method and system for risk measurement and modeling, which may be used to identify and mitigate information security risks for an information system, and which may improve the efficiency of risk measurement and modeling. Such a system may perform risk modeling based on threat likelihood information, the potential business impacts of particular threats, and data on the effectiveness of particular controls implemented by the operators of the information system, which may be used to calculate residual risk scores for particular risk scenarios that the information system may face.Type: ApplicationFiled: July 17, 2017Publication date: March 8, 2018Applicant: Secure Systems Innovation CorporationInventor: Robert VESCIO
-
Patent number: 9747570Abstract: A method and system for risk measurement and modeling, which may be used to identify and mitigate information security risks for an information system, and which may improve the efficiency of risk measurement and modeling. Such a system may perform risk modeling based on threat likelihood information, the potential business impacts of particular threats, and data on the effectiveness of particular controls implemented by the operators of the information system, which may be used to calculate residual risk scores for particular risk scenarios that the information system may face.Type: GrantFiled: September 8, 2016Date of Patent: August 29, 2017Assignee: Secure Systems Innovation CorporationInventor: Robert Vescio