The ANSSI document “Cyber attacks and remediation: Managing the remediation” provides a comprehensive framework for regaining control of a compromised information system following a major cyber incident. It defines remediation… Read More »ANSSI Cyber attacks and remediation : Managing the remediation
The CRI Profile v2.1 is a cybersecurity framework developed by the Cyber Risk Institute specifically for the financial sector, aimed at helping institutions efficiently manage and assess cyber risk while… Read More »CRI Cyber Risk Institute Profile for Financial Sector v2.1 ★★★★★
NIST SP 800-61 Revision 3, titled Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile, provides updated guidance to help organizations integrate incident response into their… Read More »NIST SP 800-61 Rev. 3 Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile
The First EPSS Calculator is an open-source tool designed to fetch and display the Exploit Prediction Scoring System (EPSS) score for one or multiple CVEs (Common Vulnerabilities and Exposures). The calculator… Read More »FIRST Exploit Prediction Scoring System (EPSS) Calculator
MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) is a comprehensive, publicly available knowledge base and framework that documents the tactics, techniques, and case studies of adversarial attacks targeting artificial… Read More »MITRE ATLAS version 4.8.0
The ANSSI Cyber Threat Overview provides a comprehensive analysis of the prevailing cyber threats, focusing on the motivations, capabilities, and methods of attackers targeting critical information systems and the broader… Read More »ANSSI Cyber threat overview 2024 (in 2025)
NIST IR 8286C Rev. 1, Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight, completes the risk management cycle by detailing how prioritized risks are formally communicated and acted… Read More »NIST IR 8286C Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight
NIST IR 8286D, Using Business Impact Analysis to Inform Risk Prioritization and Response, bridges the gap between traditional Business Impact Analysis (BIA) and modern cybersecurity risk management. It provides a… Read More »NIST IR 8286D Using Business Impact Analysis to Inform Risk Prioritization and Response
The FAIR (Factor Analysis of Information Risk) taxonomy for cyber risk scenarios provides a rigorous analytical framework that decomposes risk into two fundamental pillars: Loss Event Frequency and Loss Magnitude.… Read More »FAIR Taxonomy for Cyber Risk Scenarios ★★★★★
NIST IR 8286B, Prioritizing Cybersecurity Risk for Enterprise Risk Management, focuses on the critical transition from risk estimation to actionable decision-making. It provides guidance on how to evaluate and rank… Read More »NIST IR 8286B Prioritizing Cybersecurity Risk for Enterprise Risk Management