A connected resilience view
An overall rating supported by operational, data, financial and people discipline results.
Increasing your cyber security & data resilience.

Operational Cyber Resilience Rating
OCRR connects operations, data, finances and people to help leadership examine recovery assumptions and prioritise improvements.
Consultant delivered. No use of AI/LLM Applications. No software, agents or infrastructure to deploy.
Your OCRR journey
Begin with Industry Defaults, refine your position through Guided, then appraise improvements through Elevated. Each stage builds on the one before.
Start here · Establish your baseline
The required first step for every OCRR journey.
A no-cost, five-page Executive Summary within 2 days. Establish an industry-based starting point with an overall rating, multi-discipline breakdowns and ratings and financial context.
Uses defaults for your industry and size of organisation. It does not assess your actual environment.
Start with Industry Defaults →Next · Refine your baseline
Requires a completed Industry Defaults Assessment.
Build on that starting point, adjusting your organisation-specific information in eight distinct domains (~500 accessible fields). Refine the rating, compare multi-discipline breakdowns and identify improvement priorities.
Less than 2 hours of your time. Delivery within 7–14 days, subject to agreed scope and information availability. Commercial terms agreed separately.
Discuss progressing to Guided →Then · Appraise improvements
Builds on Industry Defaults and Guided findings.
Compare proposed policy, process and technology changes against your assessed position. Use the findings to inform improvement and investment decisions.
Our consultants work with members of one or more of your different operational, data, storage, security and financial teams to assess your elevated resilience goals.
Discuss progressing to Elevated →Industry Defaults comes first. Complete the initial assessment before progressing to Guided or Elevated.
What you receive
OCRR helps bring separate views of resilience into one executive conversation. The depth of analysis and recommendations depends on the assessment level.
An overall rating supported by operational, data, financial and people discipline results.
Findings that connect recovery assumptions with operational needs, workforce capacity and financial implications.
Organisation-specific recommendations through Guided, with proposed improvement appraisal through Elevated.
Four connected disciplines
Examine continuity arrangements, recovery capability and priorities for the services your business depends on.
Explore operational outputs →Consider data availability, integrity and recovery arrangements in relation to business activities.
Explore data outputs →Bring recovery funding, revenue loss, liquidity demands and ongoing operating costs into the discussion.
Explore financial outputs →Make productivity, additional workload and specialist support requirements visible.
Explore people outputs →Understand the approach
OCRR assesses existing resilience capabilities using agreed assumptions and, where relevant, disruption scenarios. These scenarios are not predictions of a particular attack.
Explore the assessment approach →No. OCRR is focused on cyber resilience to minimise the impact on your business when an attack is successful. A cybersecurity risk assessment is a systematic process used to identify, evaluate, and prioritise digital and operational risks connecting technical vulnerabilities to potential business impacts so companies can apply appropriate security controls.
No. It uses over 500 validated defaults aligned to your industry and size of organisation.
Yes. In the Guided assessment we apply your organisation’s actuals to assess their impact against your operational cyber resilience objectives.
Industry Default Assessment – None
Guided Assessment – Approximately 2 hours
Elevated TTP Assessment – Based on the depth of options you want assessed
Yes. Our assessments provide efficiency and effectiveness capabilities to adjust your existing IR processes
Start with an Industry Defaults Assessment, then build towards Guided and Elevated.
Our latest research:
Synergy Six have just published their latest report.
Ransomware Data Protection Vendor Spotlight - NeuShield
Synergy Six believe that organisations need an explicit ransomware data protection solution to protect and recover active data, recovery data, and installed device OS and services during exceptional operations.
These solutions should not replace existing security and data backup and recovery tools.
* SSD derived content typically achieves higher than industry average for email open and click thru rates.

Get your latest cyber insights in under 5 minutes below.
Sign up here for alerts when we publish new 'The 300' episodes.
Synergy Six Starters
Engage further with Synergy Six Degrees.
Discover six things that we can help you with right away.
What market do you want to reach?
Click the button below and let's set a time to talk.
Privacy Policy - Click here to see our privacy policy
SynergySix Flow Chains™ is a trademark of Synergy Six Degrees Limited. No copying or distribution without the expressed consent of Synergy Six Degrees.