Our methodology, and the supporting tool, helps organizations to assess cyber vulnerabilities and related risks on their tangible and intangible assets, taking into account aspects like the motivations of the attackers, the commoditization level of the organization, and including the human factors as well.

Our holistic approach (i) starts from the integrated assessment of vulnerabilities and their likelihoods, (ii) exploits an innovative micro- and macroeconomic cost model focusing on intangible costs, (iii) estimates the major cyber risks for an organization or a business sector, (iv) is followed by guidelines to support decisions related to cyber- security investments on hard (traditional) and soft mitigation measures, also integrating dedicated elicitation approaches and a Benefit-Harm Index (BHI).

The methodology supports increasing level of accuracy to accommodate the needs of organizations of different size, from SMEs to Large Enterprises.