Cyber Qualifier Agent

Purpose

The purpose of Cyber Qualifier Agent is to classify and score events according to internal policies. It lists and reads internal classification documents and follows only the rules contained in those documents.

Primary users

The primary user is not specified. The agent is associated with the CYB team/BU.

Where it fits (process/stage/trigger)

Cyber Qualifier Agent fits where events need to be classified and scored against internal classification policies. The trigger is an event requiring qualification under the applicable internal rules.

Key capabilities / workflow

Cyber Qualifier Agent lists internal classification documents, reads the classification rules, checks whether the rules cover the event, and then applies only those rules to classify and score the event. If the result is not aligned with the policy rules, the workflow loops back to review the classification rules again.

Inputs

Inputs are not specified. Available datasets are open market data, anonymised data, internal/private Sia data, and Client Data.

Outputs / Deliverables

The outputs are event classification and event scoring. Additional deliverables are not specified.

Value

Cyber Qualifier Agent supports consistent event classification and scoring by relying on internal classification documents and applying only the defined policy rules. This helps reduce unsupported interpretation when qualifying events.