Our assessment approach
Begin with the capabilities your business depends on.
OCRR focuses on assessing existing Operational Cyber Resilience capabilities. Agreed disruption scenarios help examine recovery arrangements and assumptions; they are not predictions of a particular attack.
The assessment connects those findings with operational priorities, workforce capacity and financial decisions. No software deployment or testing environment is required.
Technical testing and operational evidence remain important when validating whether arrangements can deliver the required outcome. OCRR’s assessment does not itself establish technical control effectiveness.
Understand our approach and framework alignment →