CyMetric is a one-stop shop for understanding, documenting and communicating the strategy, accountability, activities and status of an organization’s cybersecurity program. Organizations in any industry, of any size or location can leverage CyMetric to support their cybersecurity and privacy initiatives.  The CyMetric platform is a centralized repository that:

• Defines activities and tactics that satisfy regulatory, insurance, and contractual requirements written in language technology resources understand
• Supports the documentation of the cybersecurity and privacy program components that organization leadership, state agencies or other interested stakeholders require
• Directly ties network, security, and operational processes organizations implement to elements of a cybersecurity framework, compliance obligation, insurance requirement or any contractual/auditor requirement
• Enables the self-assessment or third-party assessment of the cyber program to identify and prioritize risk as well as document remediation strategies to address risk
• Produces reports that communicate the status of the program from asset inventory to compliance with regulatory requirements
• For stakeholders who are less technologically focused, CyMetric provides a risk communication mechanism to understand where risk exists within their environment and visualize program status via reports and graphical dashboards
• Helps identify gaps and risks in the cybersecurity program model that need to be addressed and prioritized which can quantify budgetary and resource requests
• Demonstrates progress of the cybersecurity program over time at the organizational or individual system level
• Adapts to changes in mapped state privacy laws or its requirements by proactively delivering updated program recommendations reflecting guidance from Caetra.io’s law firm parent organization, Harris Beach PLLC

Organizations who use CyMetric can choose between industry standard controls and tactics suggested by National Institute of Standards and Technologies (NIST) SP 800-53 publication, NIST CSF, NIST Privacy Framework, the Center for Internet Security (CIS) v8.1, ISO 27001, or industry specific guidance from CISA and for school districts, COSN TLE. Any custom controls that address privacy, notification or other unique requirements of the state specific regulations were written and validated by the attorneys at our business partner, the Harris Beach PLLC law firm.

Contracted through a solicitated agreement process.