Baldrige Cybersecurity Excellence Builder: Key questions for improving your organization's cybersecurity performance

The Baldrige Cybersecurity Excellence Builder is a voluntary self-assessment tool that enables organizations to better understand the effectiveness of their cybersecurity risk management efforts. It helps your organization identify strengths and opportunities for improvement in managing cybersecurity risk based on your organization's mission, needs, and objectives.

The Baldrige Cybersecurity Excellence Builder combines concepts in the Framework for Improving Critical Infrastructure Cybersecurity (Cybersecurity Framework) and the Baldrige Excellence Framework. Like those two sources, it is not a one-size-fits-all approach. It is adaptable and scalable to your organization’s needs, goals, capabilities, and environment. It does not prescribe how you should structure your organization’s cybersecurity policies and operations. Through interrelated sets of open-ended questions, it encourages you to use the approaches that best fit your organization.

Using this self-assessment, you can:

• determine cybersecurity-related activities that are important to your business strategy and critical service delivery;
• prioritize your investments in managing cybersecurity risk;
• determine how best to enable your workforce, customers, suppliers, partners, and collaborators to be risk conscious and security aware, and to fulfill their cybersecurity roles and responsibilities;
• assess the effectiveness and efficiency of your use of cybersecurity standards, guidelines, and practices;
• assess the cybersecurity results you achieve; and
• identify strengths to leverage and priorities for improvement.