Cybersecurity Training Gap Analysis and Matching System

Abstract

This invention provides a cybersecurity training gap analysis and matching system, including a course processing module, a job map database, a learning process database, a competency gap analysis and matching module, and an assignment decision and notification module. The system can automatically retrieve information security-related educational training courses from the websites of various cybersecurity professional training institutions for the current year. It assigns corresponding category, field, and course level tags to the retrieved courses. Based on the required courses, historical course records, and completed training hours of specific users within the organization, it calculates a competency gap list for those users. Based on this competency gap list, it accurately matches educational training courses with specific users who possess the relevant course expertise, generating a suggested course-personnel matching list for managers to filter and select.

Claims

1. A cybersecurity training gap analysis and matching system, comprising: A course processing module, electrically connected to at least one external professional training institution's website and database, is used to retrieve multiple cybersecurity education and training courses for the current year, and assign a corresponding category, field, and course level configuration tag to each retrieved course; a job map database stores a cybersecurity talent job learning map, which defines multiple personnel titles within the organization and the multiple required course codes under specific categories and fields; a learning history database stores the historical course records and completed training hours of multiple users within the organization. A competency gap analysis and matching module connects to the course processing module, the job map database, and the learning history database. Based on the job title of a specific user within the organization, this module retrieves the corresponding course codes from the job map database and compares them with the user's historical course completion records in the learning history database to generate a competency gap list. This competency gap list is then matched with courses in the course processing module that have corresponding configuration tags, producing a course-personnel matching suggestion list. An assignment decision and notification module connects to the competency gap analysis and matching module, allowing a supervisor's device to receive the course-personnel matching suggestion list. This list simultaneously displays the user's completed training hours and whether they have completed the same course in the current year. After the supervisor's device confirms the assignment, a class notification is sent to one of the user's devices.

2. The cybersecurity training gap analysis and matching system as described in claim 1, wherein, The categories defined in this cybersecurity talent skill learning map include at least oversight and governance, security development, and cybersecurity maintenance. The required course codes are further divided into three levels: general, basic, and advanced. This skill map database allows for cross-domain skill settings, so that for a specific title user belonging to the first category, the corresponding required course codes can include courses belonging to the second category.

3. The cybersecurity training gap analysis and matching system as described in claim 1, wherein, When generating the list of course and personnel matching recommendations, the competency gap analysis and matching module further excludes courses with the same name that a specific user has already taken in the current year, in order to avoid duplicate course taking.

4. The cybersecurity training gap analysis and matching system as described in claim 1, wherein, The assignment decision and notification module is set to proactively check on a predetermined date whether the training hours of all users in the organization have reached a legally mandated total training hour standard, and to proactively send alarm notifications to the corresponding supervisor's terminal device and the user's device for users who have not met the standard.

5. The cybersecurity training gap analysis and matching system as described in claim 1, wherein, The assignment decision and notification module is further used to record the course selection and learning progress of a specific user, and push out ratings and feedback questionnaires after the course ends to collect feedback data on the course content, difficulty and practicality.

Images