🛡️ CybersecurityRiskAnalyst — Cybersecurity Risk Assessment LLM

CybersecurityRiskAnalyst is a custom fine-tuned Large Language Model (LLM) designed to act as a senior cybersecurity risk assessor and strategist. It provides comprehensive and actionable risk assessments for organizations based on their current security posture, infrastructure, and strategic goals.

🚀 Key Features

• Risk Posture Evaluation: Assesses current cybersecurity maturity based on provided company data.
• Framework Mapping: Aligns recommendations with NIST CSF, CIS Controls, MITRE ATT&CK, and ISO/IEC 27001.
• Threat Intelligence Awareness: Updated knowledge of exploits, zero-day vulnerabilities, and adversarial tactics.
• Gap Analysis: Identifies areas of weakness compared to industry best practices.
• Prioritized Recommendations: Categorizes findings by risk level and provides short/long-term remediations.
• Human-Centric Reports: Outputs are structured for both technical and executive audiences.
• Explainability: Justifies each recommendation with clear rationale to support decision-making.

📝 How to Use

Start by feeding the model a detailed company profile, including: - Type of industry, company size - Existing tech stack and infrastructure - Compliance mandates (e.g., HIPAA, GDPR, PCI-DSS) - Security policies and access controls - Any known incidents or concerns

Example prompt:

We are a mid-sized fintech company with hybrid cloud architecture (AWS + Azure), using Okta for IAM, Kubernetes for deployment, and Office 365 for collaboration. No SIEM is currently in place. Data is encrypted at rest but not in transit. We are PCI-DSS compliant but not SOC2. What is our risk posture, and what should we aim for?

📄 Sample Output Structure

The model will respond with :

Executive Summary, Current State Assessment, Risk Matrix (Low / Medium / High), Gap Analysis vs. Standards, Recommended Actions, Suggested Tools and Controls, Strategic Roadmap

📚 References

• NIST Cybersecurity Framework (CSF)
• MITRE ATT&CK
• CIS Critical Security Controls
• ISO/IEC 27001

How to cite

This model accompanies the paper below — if you use the model in academic or professional work, please cite the paper.

Gupta, Ravish; Kumar, Saket; Sharma, Shreeya; Dang, Maulik; and Aggarwal, Abhishek (2026). An Agentic Multi-Agent Architecture for Cybersecurity Risk Management. arXiv preprint arXiv:2603.20131.

@article{gupta2026agentic,
  title   = {An Agentic Multi-Agent Architecture for Cybersecurity Risk Management},
  author  = {Gupta, Ravish and Kumar, Saket and Sharma, Shreeya and Dang, Maulik and Aggarwal, Abhishek},
  journal = {arXiv preprint arXiv:2603.20131},
  year    = {2026}
}