Selecting an Applicable Cybersecurity Assessment Framework: Qualitative Metrics-Based Multiple-Factor Analysis

Recently, a survey of cybersecurity assessment methods focused on general characteristics was conducted. Among its major findings, it revealed the methods’ adoption issues. This paper presents a follow-up to the study. It provides an in-depth analysis of the methods’ adoption-related properties based on qualitative metrics. As a result, the proposals which demonstrate a higher adoption potential were identified. The methods are good candidates for first-order improvements that would lead to obtaining solutions that would ultimately meet a broader application. The evaluations were performed by a single analyst, based on descriptions and individual observations. The major contribution of the study is related to providing a new view on method characteristics in reference to a systematic set of qualitative metrics and showing a path to selecting the method most suitable to a given context in terms of applicability and usability.