Cyber Essentials Intelligent Self-Assessment Assistant (CEISAA)

英国2022年国家网络战略旨在通过增加对网络基本要素(CE)等标准的采纳和实施，在企业和组织中实现高水平的网络弹性。CE被宣传为一种有效、低成本的解决方案，提供了基线级别的网络安全。CE期望组织实施5个控制(防火墙、安全配置、用户访问控制、恶意软件防护、安全更新管理)以实现基准安全。该项目旨在开发Cyber Essentials智能自我评估助手(CEISAA)，这是一个旨在捕获和分析围绕5个控制的数据的自动化助手。CEISAA随后为解决问题和实现基线安全提供智能指导，如下所示。·CEISAA通过放弃填写复杂的CE调查问卷的负担来帮助非IT中小企业所有者，从而避免与通常昂贵的专家咨询相关的成本。·CEISAA帮助提供指导的非IT中小企业所有者使用智能助手修复任何问题以实现基线安全。·使用CEISAA对基线安全进行定期监测将验证基线控制，降低申请CE合规性之前的预测试和准备成本。CEISAA也可用于家庭IT产业和世界各地希望进行CE自我评估的任何中小企业。

The UK's National Cyber Strategy 2022 aims to achieve high levels of cyber resiliency in businesses and organisations by increasing the uptake and implementation of standards such as Cyber Essentials (CE). CE is promoted as an effective, low-cost solution offering a baseline level of cyber security. CE expects organisations to implement 5 controls (firewalls, secure configuration, user access control, malware protection, security update management) to achieve baseline security.This project aims to develop Cyber Essentials Intelligent Self-Assessment Assistant (CEISAA), an automated assistant designed to capture and analyse data surrounding the 5 controls. CEISAA then provides intelligent guidance to resolve issues and achieve baseline security as follows.• CEISAA aids non-IT SME owners by forgoing the burden of completing complicated CE questionnaires and therefore avoids costs associated with often expensive expert consultancy.• CEISAA aids non-IT SME owners providing guidance using an intelligent assistant to fix any issues to achieve baseline security.• Regular monitoring of the baseline security using CEISAA will verify baseline controls, reduce the pre-testing and preparation costs before applying for CE compliance.CEISAA also can be used by home IT-estates and any SMEs worldwide who wish to conduct a CE self-assessment.