The web application provides a free score, prescriptive next steps, tools, and resources to help you make progress on your cyber security program at your own pace.


CISOSHARE's team of cyber security experts today announced the launch of Cyber Progress Index (CPI), an index and web application that presents a paradigm shift in how organizations address cyber security. Unlike other cyber security scoring and maturity methods that use risk as the primary measurement scale and base of the effort, CPI instead focuses on measuring and improving the capability of an organization's security program to progress.

Using a progress-based approach results in a more secure, and best practice-aligned security program derived from more informed decision making by organization stakeholders. This score is completely confidential to the receiving organization. Scores are designed to help organizations improve their security programs at their own pace.

"The majority of organizations are dramatically increasing what they spend on security, but are simply not getting the results their owners, boards, or stakeholders would like or expect. We believe this is directly attributed to a focus on risk reduction and management," says Mike Gentile, founder of Cyber Progress Index. "In a perfect world, modern security risk management approaches would work as the core of any security effort. But we don't live in a perfect world."

Organizations need to define security with effective governance, policies, and documentation. CPI is meant to address this need, as well as the shortage of resources needed to perform appropriate risk management activities and communicate effectively with organizational stakeholders.

"The lack of communication results in bad information, bad decisions, and the unrelenting cyber attacks we are all seeing every day, even in environments that are certified with well-known security certification programs," says Gentile.

The CPI approach focuses on how people make decisions, starting with how information is presented to them, the scope of that data, what they need to understand it, as well as how a decision is implemented once made.

"When you look at security with decision-making in mind, you reduce the skill-set needed to implement security. The costs go down, and you enable improvement by anyone who wants to take it on," says Gentile.

Cyber Progress Index works by establishing an initial score that measures how well an organization defines security, measures that definition, presents discovery information to stakeholders to make decisions, and then how those decisions are implemented.

Once the initial score is established, CPI then provides an ecosystem of tools, support, as well as do-it-yourself and validation services so users can better understand how to enhance and speed up their progress over time. Users can access comprehensive guides that also provide simple steps to build the documentation and program components they need.

Organizations can also receive support from CPI's security experts through the application's validation services. The CPI team reviews any existing or new security program documentation and provides detailed feedback on what they're doing right to enhance progress and what still needs to be considered.

"We firmly believe that improving an organization's ability to make cyber security decisions improves their ability to both manage cyber security and essentially lower risk more than simply focusing on risk reduction alone," says Gentile. "The faster your organization can make and implement well-informed decisions, the more progress will accelerate and the more prepared your organization will be."

About Cyber Progress Index
Cyber Progress Index is a SaaS based service organization located in San Clemente, California that is wholly owned by CISOSHARE. It offers a free cyber progress score for any organization, as well as a suite of progress-based subscription services. Start making progress now at

Based in Southern California, CISOSHARE is the leading provider of security program development professional and managed services for leading organizations around the world. We have served hundreds of organizations from supplying dedicated security leaders on demand to the development of world-class security programs from the ground up. Find more at

Media Contact:
May 9, 2018
Miad Moussawi