CyberRQ and ThreadRQ are used to regularly manage the risk landscape. Changes in the environment, e.g.new attack vectors or control maturities, are used to recalculate the risk scoring.
The products allow to estimate tangible and intangible financial loss ranges for individual threat scenarios based on 13 pre-defined impact models.
Simulations discover potential breach paths to “crown jewel” IT assets by taking infrastructure, threats and existing controls into account.