Capability Settings Overview
The Capabilities settings in CyberHQ serve as the foundational configuration area where an organization defines the primary security frameworks they will use to assess and track their security maturity.
The Capabilities settings in CyberHQ serve as the foundational configuration area where an organization defines the primary security frameworks they will use to assess and track their security maturity. This section is critical because it removes ambiguity from maturity assessments by allowing organizations to establish concrete benchmarks, custom scoring rubrics, and strict evidence rules tailored to their unique security objectives and governance requirements.
Primary Framework
The Primary Framework tab is where users select the core framework used for their capability assessments, such as the preset Master Control Framework, or choose to upload an entirely custom framework via CSV mapping files we provide. This tab also controls the fundamental evaluation methods, allowing users to enable custom scoring and toggle between subjective and objective scoring modes depending on how they wish to evaluate their controls.
Targets
The Targets tab allows organizations to define specific capability and maturity goals that they want to achieve against their selected framework. Users can configure these targets across varying levels of granularity, from overarching framework categories down to subcategories and individual control questions, by either directly typing a target number or adjusting a visual slider.
Threat Settings
The Threat Settings tab is where you define the threshold at which your controls will be graded when used in threat calculation tools on other parts of the platform. This affects tools like the threat modelling feature.
Threshold
The Threshold tab provides deep customization for how assessment scores and maturity levels are categorized and visually represented within the platform. Within this tab, users can configure the exact number of threshold marks, personalize the names and colors of answer labels, and define the boundaries for each category, subcategory, or question by physically dragging the threshold markers to their preferred levels.
Attestation
The Attestation tab focuses on maintaining the continuous validity and accountability of an organization's capability assessment by configuring control renewal rules. Administrators can use this tab to enforce mandatory evidence requirements when attesting a control, establish exact expiry and review intervals in days, and apply automated score reduction penalties for controls that fail to be re-attested within the designated timeframe.
Framework Builder
The Framework Builder tab is your in-platform tool for editing framework wording and weighting, giving you a central location to adjust the specific wording of your categories and controls to align to the specific requirements of your team.