Comprehensive Cyber Capabilities Framework: A Tech Tree for Cybersecurity
summary
A working group produces a first cybersecurity Tech Tree focused on data, deriving a Data Security Maturity Model (DSMM) from the Cyber Defense Matrix and dozens of existing frameworks, publishes it as DSMM on GitHub and docs.datasecurity.org, and reports early internal use at a vendor (Cyberhaven) plus VC interest. The team maps controls to NIST/CIS/ISO, uncovers pervasive gaps (especially around data vulnerability vs misconfiguration and what a “patch” even is), and invites practitioners to test and extend the model.
AI-written summary · about
chapters (6)
- 0:00Introduction and framework overview
- 13:24Introducing the Tech Tree concept
- 18:44Analysis of existing cybersecurity frameworks
- 28:36Challenges in defining data vulnerabilities
- 39:42How to get involved and next steps
- 45:04Q&A session
related talks
29mMeasuring Cybersecurity Maturity with the NIST CSF
33mDecoding Cyber Threats: A Practical Guide to Using Attack Trees
30mBlueprint for Maturity: Crafting a Tailored Cyber Threat Intelligence Maturity Model
45mFrom Attacks to Action: An Open Community Model to Drive Defensive Choices
40mTool Time: Building Your Cybersecurity Architecture Planning Toolbox
27mFrom Attacks to Action - Building a Usable Threat Model to Drive Defensive Choices
40mCybersecurity Operations Center Technology Taxonomy
46mCyber Defense Matrix: Revolutions