Patent ID: 7945940
Filing Date: 2011-05-17
Classification: G06F

Abstract:
1. A method for measuring a numerical information security level at an organization for standardized comparison to numerical information security levels of other organizations, the method comprising: performing measurements on specific information security issues within three different security areas of the organization comprising the security areas logical information security, system information security, and physical information security, treating the specific information security issues as checkpoints; using various sources, including current standards, to gather an information set to state a predefined norm security level; using the norm security level to create different lower and higher numerical security levels within each checkpoint; using the measurements and having a rating reviewer give a numerical grade to each checkpoint; using mathematical operations to calculate a result based on the numerical checkpoint grades; and using the result to indicate which numerical information security level is fulfilled, wherein the result presents a relative rating regarding information security within each area that is comparable between different organizations and also presents comparable ratings regarding different checkpoints within the organization, wherein a software tool is used to graphically present the result, wherein the graphic presentation includes a graphical tool for decision making, wherein the graphical tool comprises at least one diagram presenting: