Summary of the findings from the NGO evaluation of the proposed approach
| Case study | Main requirements | Tool evaluation results | Favorite features |
|---|---|---|---|
| Organization A | -Identify risks easily -The ability to use the tool without the need for experience in the field of cybersecurity. -Considering the budget and available resources of the organization | Satisfaction with the tool’s features and that it fits the NGOs’ requirements | The assessment report is easy to understand. It contains sufficient information to distribute to all organization staff |
| Organization B | -The ability to use the tool without the need for experience in the field of cybersecurity. -Considering the budget and available resources of the organization | -The tool meets the specifications suitable for NGOs -The tool should be used by an experienced employee who is familiar with the organization’s internal processes to get more accurate results | The structuring of the report’s contents and the use of color to denote risk level make it simpler for readers to understand and can aid the NGO in identifying priority risks for mitigation |
| Organization C | -The ability to quickly identify risks and propose countermeasures to mitigate cybersecurity risks -Considering the available budget and resources | Satisfaction with the tool’s features and that it fits the NGOs’ requirements | Clarity of the steps involved in adding assets and conducting assessment |
| Case study | Main requirements | Tool evaluation results | Favorite features |
|---|---|---|---|
| Organization A | -Identify risks easily | Satisfaction with the tool’s features and that it fits the NGOs’ requirements | The assessment report is easy to understand. It contains sufficient information to distribute to all organization staff |
| Organization B | -The ability to use the tool without the need for experience in the field of cybersecurity. | -The tool meets the specifications suitable for NGOs | The structuring of the report’s contents and the use of color to denote risk level make it simpler for readers to understand and can aid the NGO in identifying priority risks for mitigation |
| Organization C | -The ability to quickly identify risks and propose countermeasures to mitigate cybersecurity risks | Satisfaction with the tool’s features and that it fits the NGOs’ requirements | Clarity of the steps involved in adding assets and conducting assessment |
Sharing content requires targeting cookies to be enabled. Please update your cookie preferences to use this feature.