Deriving Design Principles from the Design journey of a Cybersecurity Readiness Assessment Tool

Abstract

The need for assessing cybersecurity readiness of an organization has been growing in importance. However, the existing research literature lacks a system for evaluating this aspect. This research paper describes the design journey of designing a Cybersecurity Readiness Assessment Tool (CRAT) using a Design Science Research (DSR) perspective. Since designing software is complex, we follow an iterative approach to design and develop CRAT. Through the DSR iterations, we deduce Design Principles (DP) emanating from our development journey.