CRAM™
A Model of the Business and
Every Risk to It.
CRAM™, Cyber Risk Assessment and Management, is the model AQUILA C4I runs on. It connects what a business does to what could stop it, in a language leadership and security both read.
The Idea
Two Worlds.
One Question.
The Business Asks
What are we here to do, how do we fund it, and who do we serve?
Security Asks
What are we here to protect, where are we exposed, and who would come after us?
Both end with the same question: what could slow us down or stop us? CRAM™ starts there, with the business first and the risk to it second.
Three Planes
How CRAM™ Sees an Organization.
01
The Mission
Why the organization exists and what it is trying to achieve.
02
The Growth Engine
The processes, people and partners that turn the mission into revenue.
03
The Inherited Risk
What that costs in risk, some of it obvious and much of it carried quietly.