A Process Pattern for Cybersecurity Assessment Automation: Experience and Futures
James Cusick · 2024
Ensuring the security of the supply chain is a vital governance and compliance function within industry. Security breaches often emanate from suppliers or partner firms. Any reliable system must also be secure including those using AI. One major risk reduction countermeasure is the use of Third-Party assessments. These come in the form of Cybersecurity assessments, audits, and supporting questionnaires. Completion of these assessments places a burden on suppliers. An end-to-end workflow solution for this challenge is presented including the application of an AI based Machine Learning approach to match assessment questions with answers rapidly and accurately. This real-world solution is abstracted into a suggested Process Pattern for Security Assessment Automation which can structure new implementations of such business processes leveraging ever improving AI technologies. After reviewing the background of Process Patterns, the Cybersecurity supply chain governance domain, and the operational solution, the form, use, and prospects of this Process Pattern are elaborated.