A Web Platform Based on the NIST CSF for Assessing and Monitoring the Cybersecurity of SMEs and Critical Infrastructures  

作　　者：Mohamadou Konate Pegdwinde Justin Kouraogo Omar Hamidou Harouna Mohamadou Konate;Pegdwinde Justin Kouraogo;Omar Hamidou Harouna(Institut Burkinabe des Arts et Metiers (IBAM), Joseph KI-ZERBO University, Ouagadougou, Burkina Faso;Computer Science Department, Joseph KI-ZERBO University, Ouagadougou, Burkina Faso;Science and Technology Training and Research Unit, New Dawn University, Ouagadougou, Burkina Faso)

机构地区：[1]Institut Burkinabe des Arts et Metiers (IBAM), Joseph KI-ZERBO University, Ouagadougou, Burkina Faso [2]Computer Science Department, Joseph KI-ZERBO University, Ouagadougou, Burkina Faso [3]Science and Technology Training and Research Unit, New Dawn University, Ouagadougou, Burkina Faso

出　　处：《Open Journal of Applied Sciences》2025年第1期274-284,共11页应用科学(英文)

摘　　要：The NIST Cybersecurity Framework (NIST CSF) serves as a voluntary guideline aimed at helping organizations, tiny and medium-sized enterprises (SMEs), and critical infrastructure operators, effectively manage cyber risks. Although comprehensive, the complexity of the NIST CSF can be overwhelming, especially for those lacking extensive cybersecurity resources. Current implementation tools often cater to larger companies, neglecting the specific needs of SMEs, which can be vulnerable to cyber threats. To address this gap, our research proposes a user-friendly, open-source web platform designed to simplify the implementation of the NIST CSF. This platform enables organizations to assess their risk exposure and continuously monitor their cybersecurity maturity through tailored recommendations based on their unique profiles. Our methodology includes a literature review of existing tools and standards, followed by a description of the platform’s design and architecture. Initial tests with SMEs in Burkina Faso reveal a concerning cybersecurity maturity level, indicating the urgent need for improved strategies based on our findings. By offering an intuitive interface and cross-platform accessibility, this solution aims to empower organizations to enhance their cybersecurity resilience in an evolving threat landscape. The article concludes with discussions on the practical implications and future enhancements of the tool.The NIST Cybersecurity Framework (NIST CSF) serves as a voluntary guideline aimed at helping organizations, tiny and medium-sized enterprises (SMEs), and critical infrastructure operators, effectively manage cyber risks. Although comprehensive, the complexity of the NIST CSF can be overwhelming, especially for those lacking extensive cybersecurity resources. Current implementation tools often cater to larger companies, neglecting the specific needs of SMEs, which can be vulnerable to cyber threats. To address this gap, our research proposes a user-friendly, open-source web platform designed to simplify the implementation of the NIST CSF. This platform enables organizations to assess their risk exposure and continuously monitor their cybersecurity maturity through tailored recommendations based on their unique profiles. Our methodology includes a literature review of existing tools and standards, followed by a description of the platform’s design and architecture. Initial tests with SMEs in Burkina Faso reveal a concerning cybersecurity maturity level, indicating the urgent need for improved strategies based on our findings. By offering an intuitive interface and cross-platform accessibility, this solution aims to empower organizations to enhance their cybersecurity resilience in an evolving threat landscape. The article concludes with discussions on the practical implications and future enhancements of the tool.

关 键 词：CYBERSECURITY NIST CSF Framework Cybersecurity Assessment Tool Cybersecurity Mitigation Small and Medium-Sized Enterprises Critical Infrastructure 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]