services

If you want models to enhance your risk management program start with Qualitative to Quantitative, Cyber Program Risk and Risk Management Models. This combination helps you move from current methods to quantitative methods and gives you the ability to begin to start focusing on impact, comparing and aggregating risks across your organization.

If your focus is on cyber attack risk then you'll want the forecasting models. These models allow you to have multiple views into your risk of cyber attack; from the system, architecture, protocols, data flows, perimeter and end-point defenses as well as policies and procedures. 

The vulnerability analysis model is core to any risk analysis as it's the fastest way to identify which vulnerabilities could lead to initial access or privilege escalation. This is a powerful way to prioritize remediation and measurably reduce risk.

If you're looking for advanced ways of evaluating and forecasting risk, then the Advanced Models are perfect for you. These are all custom using specific methods and mathematical algorithms.

If your organization uses Office 365 then you already have the infrastructure to automate your data collection and visualization. Take your risk management to the next level and get near real time data to support your critical decisions and track risk.

Training is how you build internal capability in the area of risk analysis, quantification and management. Several workshops are foundational such as the primer, quantifying risk for management, effective measures and metrics. 

The vulnerability analysis workshop is critical for any organization as this is the best way to get deep insights into your vulnerabilities and how to effectively prioritize remediation to measurably reduce risk. 

Every organization can benefit from Application Risk Analysis. This method has been successfully applied multiple times to quickly and effectively yield deep insights into risk related to design. This analysis is useful in conjunction with vulnerability analysis of the systems and code analysis from automated code review.

If you want to get insights into where the risk resides in your current program and get recommendations on how to reduce that risk, then the Program Review is for you.