Purdue University Graduate School
Lerums Ph.D. Dissertation.pdf (4.76 MB)

Measuring the State of Indiana's Cybersecurity

Download (4.76 MB)
posted on 2019-01-16, 15:15 authored by James E. LerumsJames E. Lerums

This dissertation introduces a scorecard to enable the State of Indiana to measure the cybersecurity of its public and private critical infrastructure and key resource sector organizations. The scorecard was designed to be non-threatening and understandable so that even small organizations without cybersecurity expertise can voluntarily self-asses their cybersecurity strength and weaknesses. The scorecard was also intended to enable organizations to learn, so that they may identify and self-correct their cybersecurity vulnerabilities. The scorecard provided quantifiable feedback to enable organizations to benchmark their initial status and measure their future progress.

Using the scorecard, the Indiana Executive Council for Cybersecurity launched a Pilot to measure cybersecurity of large, medium, and small organizations across eleven critical infrastructure and key resources sectors. This dissertation presents the analysis and results from scorecard data provided by the Pilot group of 56 organizations. The cybersecurity scorecard developed as part of this dissertation has been included in the Indiana Cybersecurity Strategy Plan published September 21, 2018.


Purdue Polytechnic Institute Seed Grant Program


Degree Type

  • Doctor of Philosophy


  • Computer and Information Technology

Campus location

  • West Lafayette

Advisor/Supervisor/Committee Chair

Dr. James E. Dietz

Additional Committee Member 2

Dr. Joseph F. Pekny

Additional Committee Member 3

Dr. John A. Springer

Additional Committee Member 4

Dr. Baijian Yang