MUMBAI, India, Sept. 22 -- Intellectual Property India has published a patent application (202641107326 A) filed by Hindustan Institute Of Technology And Science on September 07, 2026, for System And Method For Cybersecurity Metrics-Based Decision Making And Security Management.
Inventors include Ramu; and Dr. Sudalaimuthu T.
The application for the patent was published on September 18, 2026, under issue no. 38/2026.
Abstract: The present invention provides a system and method for cybersecurity metrics-based decision making and security management. In one aspect, the invention provides a cybersecurity management system comprising a metrics acquisition module, a metrics normalization and processing module, a correlation and analytics module, a cybersecurity scoring module, a decision engine, and a security management interface. The metrics acquisition module receives cybersecurity-related data from a plurality of heterogeneous sources including security tools, network devices, endpoints, applications, cloud platforms, vulnerability scanners, identity systems, incident- management systems, compliance systems, and threat intelligence sources. The metrics normalization and processing module converts the received information into standardized cybersecurity metrics based on predefined measurement parameters, thresholds, time periods, asset criticality, and organizational security requirements. The correlation and analytics module correlates multiple cybersecurity metrics to identify relationships between vulnerabilities, threats, incidents, security controls, assets, users, and business-critical resources. The cybersecurity scoring module generates one or more cybersecurity indicators, including risk scores, control effectiveness scores, vulnerability scores, incident severity scores, compliance scores, resilience scores, and overall security posture scores. The decision engine uses the generated metrics and scores to prioritize cybersecurity risks and determine recommended security actions based on risk severity, asset criticality, potential business impact, available security resources, and predefined organizational policies. The system may further provide predictive and trend-based analysis to identify deteriorating security conditions and provide early-warning indications before a security condition develops into a significant cybersecurity incident. The invention thereby enables cybersecurity stakeholders to make data-driven, measurable, prioritized, and context-aware security decisions rather than relying solely on isolated security alerts or manually interpreted technical information.
Disclaimer: Curated by HT Syndication.
