Patent ID: 11930032
Assignee: nan
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC H

Claim 7:
8. The method of claim 1, wherein step d) comprises:
a. for each group G of said groups with said identified gaps;
b. for each security control i pre-assigned to said group, calculating the size of the shortfall for the security control by subtracting the actual maturity score from the expected maturity score for this security control, as in the formula SFi=ESi−CSi;
c. sorting all security controls pre-assigned to said group whose actual maturity scores fall short of their expected maturity scores, in ascending order of priority (P1 then P2 then P3) followed by descending order of the size of the shortfall SFi;
d. working through the sorted list, choosing security controls for improvement, each time subtracting the size of the shortfall SFi from the size of the gap for said group GSG, until there are no more security controls or the sum of shortfall for the chosen security controls equals or exceeds the size of the gap, as in the formula GSG≤Σρ=P1P3Σi=1g Max(SFi)ρ, where Max(SFi)ρ is the largest remaining shortfall in the sorted list of security controls with priority ρ in group G and g is the number of security controls in group g with a nonzero shortfall;
e. recommending improvements in functionality for said chosen security controls, according to the declarative statements representing the missing levels of functionality;
wherein the steps above are implemented using a computing device.