Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

On November 13, 2018, CMMI Institute announced an update to its Cybermaturity Platform, saying it had aligned the platform with NIST Cybersecurity Framework (CSF) version 1.1 and added one new category and ten new subcategories from the framework. The announcement also said the update incorporated the 2018 Verizon Data Breach Investigations Report (DBIR) and additional cybersecurity best practices. These are historical claims about the 2018 release, not confirmation of the platform’s current features or availability.

What changed in the November 2018 update?

CMMI Institute said the update added one category and ten subcategories from NIST CSF version 1.1. Those figures describe additions made to the platform; they are not the total number of categories or subcategories in the framework. The announcement also said the update reflected findings from the 2018 Verizon DBIR and incorporated a comprehensive set of cybersecurity best practices. CMMI Institute’s November 13, 2018 announcement framed the changes as a response to evolving threats and changes in industry standards.

The timing mattered to CMMI’s rationale: NIST CSF 1.1 had been released in spring 2018, and the institute said cybersecurity practices needed to adapt as threats and standards changed. The release does not itemize the newly added category or subcategories, so it does not support a more detailed account of their names or contents.

How did CMMI describe the platform’s role?

In 2018, CMMI described the Cybermaturity Platform as a cloud-hosted application for enterprise technology and business leaders. Its stated functions included custom risk profiling, cybersecurity assessments, gap analyses, and roadmap capabilities. The intended workflow was to use an organization’s risk assessment to identify improvement priorities and shape a cybersecurity roadmap, rather than treating the work solely as a checklist of controls.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The institute said the platform was being used in financial services, healthcare, and manufacturing. It presented the tool as a way to support evidence-based decisions about improving cybersecurity programs and prioritizing investment. Those descriptions and sector claims come from the institute’s announcement; they are not an independent evaluation of the product or evidence that it improved security outcomes.

What did the release say about update cadence?

CMMI Institute CEO Kirk Botula said the institute believed six-month cycles were necessary for incorporating best-practice updates and building new cyber capabilities. This was his stated view in 2018, not verification that every platform update actually followed a six-month schedule. The announcement does not establish the platform’s update cadence after that release.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What the announcement does—and does not—establish

  • Established as a 2018 announcement: CMMI reported adding one NIST CSF category and ten subcategories, incorporating the 2018 Verizon DBIR, and adding cybersecurity best practices.
  • Product positioning, not a measured result: CMMI presented risk profiling, assessments, gap analysis, and roadmap planning as ways to help organizations set improvement priorities. The reviewed material provides no independent study or outcome statistic showing improved security effectiveness.
  • Not established today: The announcement does not confirm current availability, pricing, features, update frequency, or partner and referral arrangements.

For context, Dark Reading’s November 7, 2018 report reproduced the main update details. It is contemporaneous coverage, not evidence of the product’s present-day status.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.