Patent ID: 8256004
Filing Date: 2012-08-28
Classification: G06Q

Abstract:
1. A method for a control transparency framework, comprising: identifying threats to an organization; developing a risk score for each of the threats to develop a threat portfolio, wherein the risk score is indicative of an impact each threat may have on the organization and a probability of the threat occurring; developing a maturity portfolio comprising a maturity level for controls, the maturity levels being determined utilizing a maturity model, the maturity model comprising a Control Objective for Information and Related Technology (COBIT) maturity model, a Capability Maturity Model (CMM), or a combination of the above; configuring at least one processor to perform the function of mapping information from the threat portfolio to the maturity portfolio to develop a control portfolio; determining a gap portfolio comprising identifying any gaps between a target state maturity level of each control and a current maturity level of each control assigned to handle each of the at least one identified threat, such that the gap occurs if the target state maturity level is at a level that is higher than the current maturity level; and developing a control transparency portfolio to close each of the gaps to match or exceed the target state maturity level.