Operational Cyber Resilience Rating

Understand your Operational Cyber Resilience.
Prioritise what matters.

Clear actionable insights. Minimal demands on your team.

Consultant-delivered OCRR assesses existing resilience capabilities across operations, data, finances and people. Start with an industry-default representation, then refine the assessment using your organisation’s information to examine recovery assumptions and improvement priorities.

OCRR combines Operational, Data, Financial and People Resilience

No-cost starting point

Five-page Executive Summary within 2 days, using industry defaults.

Minimal involvement

A further Guided Assessment requires less than 2 hours of your time.

No deployment

No software, agents or infrastructure to deploy in your environment.

From capability to business priorities

Turn your existing resilience capabilities into clear business priorities.

Your organisation already has technology, recovery arrangements, policies and people responsible for keeping the business operating. OCRR brings those capabilities into a shared business view, helping leadership decide where to investigate, improve and invest.

  • Which operational and recovery capabilities need attention?
  • Will our data recovery assumptions support usable business services?
  • What do those assumptions mean for workforce capacity and cost?
  • Which policy, process or technology improvements warrant investment?

A clearer basis for decisions

Move from assumptions to an informed resilience review.

The change is in what leadership can see and discuss. An assessment provides a basis for action; improvement follows when changes are implemented and validated.

Before OCRR

Separate views.
Unexamined assumptions.

  • Technology, recovery and workforce information sit apart.
  • Confidence relies on assumptions about existing arrangements.
  • Financial and productivity implications are difficult to explain.
  • Investment priorities compete without a shared business view.

With OCRR

A shared view.
Clearer priorities.

  • One rating with four connected resilience disciplines.
  • Existing capabilities and recovery assumptions brought into review.
  • Financial and workforce context for executive discussion.
  • Improvement options to investigate, compare and validate.

What you receive

A clear rating.
The detail behind it.
Practical next steps.

  • An overall OCRR rating, supported by four discipline results.
  • Operational and recovery findings that highlight priorities and assumptions needing further review.
  • Financial and productivity analysis that gives leadership context for decisions.
  • Practical next steps, with organisation-specific recommendations through Guided and improvement appraisal through Elevated.
Explore your rating and report →
Illustrative five-page OCRR Executive Summary report
Illustrative output. The initial summary uses industry defaults and does not represent your actual environment.

Four disciplines. One business view.

See resilience across the whole business.

Illustrative Operational Resilience rating

Operational Resilience

Understand recovery capability, continuity arrangements and priorities for critical services.

Illustrative Data Resilience rating

Data Resilience

Examine availability, integrity and recovery arrangements in relation to the business activities that depend on your data.

Illustrative Financial Resilience rating

Financial Resilience

Consider your organisation’s ability to fund recovery and sustain the business through revenue loss, liquidity demands and ongoing operating costs.

Illustrative People Resilience rating

People Resilience

Make workforce productivity, additional workload and specialist support requirements visible.

Icons show illustrative ratings, not findings about your organisation.

Explore operational resilience and recovery →

Choose the depth you need

Start simply. Refine your assessment. Appraise improvements.

01 · ESTABLISH A BASELINE

Industry Defaults Assessment

An initial industry-default representation, without relying on your teams to gather information. It does not reflect your actual environment.

  • Five-page Executive Summary
  • OCRR rating and four-area breakdown
  • Financial context under stated recovery assumptions
  • Key industry findings for guidance

No-cost · Within 2 days
Uses industry defaults; organisation-specific refinement follows through Guided.

02 · REFINE YOUR POSITION

Guided Assessment

Bring your organisation’s existing environment, policies and recovery arrangements into the assessment.

  • Refined OCRR rating
  • Detailed findings across all four disciplines
  • Tailored financial and operational analysis
  • Role based findings and guidance
  • Capability gaps and improvement recommendations

Less than 2 hours of your time · 7–14 days
Builds on the Industry Defaults Assessment. Scope and commercial terms agreed separately.

03 · COMPARE IMPROVEMENTS

Elevated Resilience TTPs Assessment

Multiple assessments to appraise proposed cyber resilience tactics, techniques and procedures before committing resources.

  • Appraise cyber simulations
  • Adjusted policies and processes
  • Proposed technology changes
  • Guided versus Elevated outcomes
  • Cost-benefit trade-offs and business-case support

Builds on the assessment baseline and Guided findings. Scope, delivery and commercial terms agreed separately.

Explore improvement appraisal →

Our assessment approach

Begin with the capabilities your business depends on.

OCRR focuses on assessing existing Operational Cyber Resilience capabilities. Agreed disruption scenarios help examine recovery arrangements and assumptions; they are not predictions of a particular attack.

The assessment connects those findings with operational priorities, workforce capacity and financial decisions. No software deployment or testing environment is required.

Technical testing and operational evidence remain important when validating whether arrangements can deliver the required outcome. OCRR’s assessment does not itself establish technical control effectiveness.

Understand our approach and framework alignment →

Clarity today. A more resilient tomorrow.

Make your next resilience decision better informed.

Start with a no-cost, industry-based Executive Summary. Then decide whether to refine the assessment around your organisation and explore improvement options.