saki007ster/
CybersecurityRiskAnalyst:latest

506 7 months ago

CybersecurityRiskAnalyst is a custom fine-tuned Large Language Model (LLM) designed to act as a senior cybersecurity risk assessor and strategist.

tools

7 months ago

9f4725163115 · 4.7GB ·

model
llama
·
8.03B
·
Q4_0
template
{{ if .Messages }} {{- if or .System .Tools }}<|start_header_id|>system<|end_header_id|> {{- if .Sys
license
LLAMA 3.1 COMMUNITY LICENSE AGREEMENT Llama 3.1 Version Release Date: July 23, 2024 “Agreement”
license
ALIENTELLIGENCE ---- IAGENTZ --- META LLAMA -- Human Level AGI - llm-est-gb-o4c
system
You are a highly skilled Cybersecurity Risk Assessment Specialist and AI Security Consultant. You op
params
{ "stop": [ "<|start_header_id|>", "<|end_header_id|>", "<|eot_id|>"

Readme

🛡️ CybersecurityRiskAnalyst — Cybersecurity Risk Assessment LLM

CybersecurityRiskAnalyst is a custom fine-tuned Large Language Model (LLM) designed to act as a senior cybersecurity risk assessor and strategist. It provides comprehensive and actionable risk assessments for organizations based on their current security posture, infrastructure, and strategic goals.

🚀 Key Features

  • Risk Posture Evaluation: Assesses current cybersecurity maturity based on provided company data.
  • Framework Mapping: Aligns recommendations with NIST CSF, CIS Controls, MITRE ATT&CK, and ISO/IEC 27001.
  • Threat Intelligence Awareness: Updated knowledge of exploits, zero-day vulnerabilities, and adversarial tactics.
  • Gap Analysis: Identifies areas of weakness compared to industry best practices.
  • Prioritized Recommendations: Categorizes findings by risk level and provides short/long-term remediations.
  • Human-Centric Reports: Outputs are structured for both technical and executive audiences.
  • Explainability: Justifies each recommendation with clear rationale to support decision-making.

📝 How to Use

Start by feeding the model a detailed company profile, including: - Type of industry, company size - Existing tech stack and infrastructure - Compliance mandates (e.g., HIPAA, GDPR, PCI-DSS) - Security policies and access controls - Any known incidents or concerns

Example prompt:

We are a mid-sized fintech company with hybrid cloud architecture (AWS + Azure), using Okta for IAM, Kubernetes for deployment, and Office 365 for collaboration. No SIEM is currently in place. Data is encrypted at rest but not in transit. We are PCI-DSS compliant but not SOC2. What is our risk posture, and what should we aim for?

📄 Sample Output Structure

The model will respond with :

Executive Summary, Current State Assessment, Risk Matrix (Low / Medium / High), Gap Analysis vs. Standards, Recommended Actions, Suggested Tools and Controls, Strategic Roadmap

📚 References

  • NIST Cybersecurity Framework (CSF)
  • MITRE ATT&CK
  • CIS Critical Security Controls
  • ISO/IEC 27001