Evaluating the Use of Technology Readiness Levels (TRLs) for Cybersecurity Systems

Technology readiness levels (TRLs) are used to evaluate and convey the readiness status of aerospace technologies for mission use. The TRL system was pioneered by NASA; however, the European Union and other U.S. federal agencies – including the United States departments of Homeland Security, Defense and Energy – have also developed related systems. This paper proposes the use of a cybersecurity capability readiness level system to assess and characterize the readiness status of cybersecurity systems for use. It discusses the existing readiness level systems as well as the Cybersecurity Maturity Model, comparing and contrasting them. A new system, based on the TRL system, is proposed and its levels are defined and discussed.