Cyber Essentials Intelligent Self-Assessment Assistant (CEISAA)

Cyber​​ Essentials 智能自我评估助手 (CEISAA)

• 批准号: 10076703
• 金额: $ 1.42万
• 依托单位: UNIVERSITY OF HERTFORDSHIRE HIGHER EDUCATION CORPORATION
• 依托单位国家: 英国
• 项目类别: Collaborative R&D
• 财政年份: 2023
• 资助国家: 英国
• 起止时间: 2023 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=10076703
• 关键词: Cyber; Essentials; Intelligent; Self; Assessment

The UK's National Cyber Strategy 2022 aims to achieve high levels of cyber resiliency in businesses and organisations by increasing the uptake and implementation of standards such as Cyber Essentials (CE). CE is promoted as an effective, low-cost solution offering a baseline level of cyber security. CE expects organisations to implement 5 controls (firewalls, secure configuration, user access control, malware protection, security update management) to achieve baseline security.This project aims to develop Cyber Essentials Intelligent Self-Assessment Assistant (CEISAA), an automated assistant designed to capture and analyse data surrounding the 5 controls. CEISAA then provides intelligent guidance to resolve issues and achieve baseline security as follows.• CEISAA aids non-IT SME owners by forgoing the burden of completing complicated CE questionnaires and therefore avoids costs associated with often expensive expert consultancy.• CEISAA aids non-IT SME owners providing guidance using an intelligent assistant to fix any issues to achieve baseline security.• Regular monitoring of the baseline security using CEISAA will verify baseline controls, reduce the pre-testing and preparation costs before applying for CE compliance.CEISAA also can be used by home IT-estates and any SMEs worldwide who wish to conduct a CE self-assessment.

英国《2022年国家网络战略》旨在通过增加对网络基本要素（Cyber Essentials， CE）等标准的吸收和实施，在企业和组织中实现高水平的网络弹性。CE作为一种有效、低成本的解决方案，提供了基本的网络安全水平。CE期望组织实施5项控制措施（防火墙、安全配置、用户访问控制、恶意软件保护、安全更新管理）以达到基线安全性。该项目旨在开发Cyber Essentials智能自我评估助手（CEISAA），这是一种自动助手，旨在捕获和分析围绕5个控制的数据。然后，CEISAA提供智能指导来解决问题并实现基线安全性，如下所示。•CEISAA通过放弃完成复杂CE问卷的负担来帮助非it中小企业所有者，从而避免了与通常昂贵的专家咨询相关的费用。•CEISAA帮助非it中小企业主使用智能助手提供指导，以解决任何问题，以实现基线安全性。•使用CEISAA定期监测基线安全性将验证基线控制，减少申请CE符合性之前的预测试和准备成本。CEISAA也可供世界各地希望进行行政长官自我评估的资讯科技屋苑和中小企业使用。