CyberHQ Platform Overview
CyberHQ is an enterprise cybersecurity management platform that bridges technical operations and executive governance by organizing resilience, risk, and maturity data across five core modules. Through these integrated modules, organizations can assess their internal and third-party risk, manage strategic security programs, and generate board-ready, financially quantified reports to justify security investments.
CyberHQ is your cybersecurity management platform for streamlining and enhancing your organization's cyber resilience, risk, and maturity posture. The platform is divided into five core modules you can access through the left-hand menu:
- Reports
- Strategy
- Assessments
- Catalogue
- Settings
Each of these modules offers specialized tools to help organizations align their security initiatives with overarching business objectives.
Reporting
The Reports module delivers comprehensive visibility into the organization's cybersecurity data through a variety of targeted dashboards. These include the board-ready Executive Report, the Risk Report, the Capabilities Report, the Business Systems Report, the Entities Report, and the Issues Report. Additionally, the Threat FX dashboard aggregates threat data to provide an overview of organizational threat exposure and identify common attacker techniques.
Strategy
The Strategy module enables organizations to establish a foundational Mission and Vision statement while incorporating Strategic Business Objectives (SBOs). Within this module, users can create, save, and activate comprehensive cyber programs designed to uplift activities against these business objectives. The module also features a Program Dashboard and a Kanban-style Manage Activities section, allowing teams to visually track the progress, budget, and outcomes of their strategic activities as they move through customizable workflows.
Assessments
The Assessments module provides a suite of evaluation tools to measure an organization's internal security posture and external risks. Users can conduct a Capabilities Assessment against primary frameworks (such as the Master Control Framework or custom frameworks) to determine their maturity score, and use the Compliance section to translate responses between different frameworks. Additionally, it houses the Exposure Assessment to evaluate inherent risk profiles, the Entities section to manage and review third-party assessments via Questionnaires, the Threat Modeling tool to simulate real-time threat activity against organizational changes, and Risk Quantification to assign data-driven numerical values to potential risks.
Catalogue
The Catalogue acts as the central repository for an organization's critical assets, resources, and vulnerabilities. It allows users to track and manage Issues that impact the overall Cyber Resilience score, detailing required remediation actions and allocating owners and due dates. The Catalogue also stores Business Systems and Key Business Systems (high-value assets or crown jewels), mapping them directly to mandatory cybersecurity controls. Furthermore, users can log Security Resources, categorized into Technology, People, Service Providers, and Documentation, and record overarching Security Services that support the workspace's controls.
Settings
The Settings module is the administrative backbone of CyberHQ, allowing users to configure the platform to suit their specific operational requirements. Here, administrators can manage Risk settings (such as customizing the risk matrix, impact levels, and risk event types) and Capabilities settings (including framework selection, scoring targets, and attestation rules). It is also the central hub for managing Users and their roles, structuring Workspaces (distinct business units or subsidiaries), configuring Connectors and Integrations (like Jira, AWS, or ServiceNow) for external data ingestion, editing the Company Profile, and managing access to the organization's Trust Portal.