Cyber security & data protection.

Do you want to increase resilience?

Synergy Six Degrees is a specialist analyst firm in the cyber security and data protection sector, guiding organisations and their business partners to viable products and markets.


Revealing what may be hidden in plain sight.

Operational Cyber Resilience Rating

A shared view of resilience.
A clearer basis for action.

OCRR connects operations, data, finances and people to help leadership examine recovery assumptions and prioritise improvements.

Consultant delivered. No use of AI/LLM Applications. No software, agents or infrastructure to deploy.

Your OCRR journey

Start your journey.
Build on each assessment.

Begin with Industry Defaults, refine your position through Guided, then appraise improvements through Elevated. Each stage builds on the one before.

  1. Start here · Establish your baseline

    Industry Defaults Assessment

    The required first step for every OCRR journey.

    A no-cost, five-page Executive Summary within 2 days. Establish an industry-based starting point with an overall rating, multi-discipline breakdowns and ratings and financial context.

    Uses defaults for your industry and size of organisation. It does not assess your actual environment.

    Start with Industry Defaults →
  2. Next · Refine your baseline

    Guided Assessment

    Requires a completed Industry Defaults Assessment.

    Build on that starting point, adjusting your organisation-specific information in eight distinct domains (~500 accessible fields). Refine the rating, compare multi-discipline breakdowns and identify improvement priorities.

    Less than 2 hours of your time. Delivery within 7–14 days, subject to agreed scope and information availability. Commercial terms agreed separately.

    Discuss progressing to Guided →
  3. Then · Appraise improvements

    Elevated TTP Options Assessment

    Builds on Industry Defaults and Guided findings.

    Compare proposed policy, process and technology changes against your assessed position. Use the findings to inform improvement and investment decisions.

    Our consultants work with members of one or more of your different operational, data, storage, security and financial teams to assess your elevated resilience goals.

    Discuss progressing to Elevated →

Industry Defaults comes first. Complete the initial assessment before progressing to Guided or Elevated.

What you receive

The rating.
The context behind it.
Your next priorities.

OCRR helps bring separate views of resilience into one executive conversation. The depth of analysis and recommendations depends on the assessment level.

A connected resilience view

An overall rating supported by operational, data, financial and people discipline results.

Recovery and business context

Findings that connect recovery assumptions with operational needs, workforce capacity and financial implications.

Practical next steps

Organisation-specific recommendations through Guided, with proposed improvement appraisal through Elevated.

Four connected disciplines

See the business
behind the technology.

01 / OPERATIONAL

Can services recover?

Examine continuity arrangements, recovery capability and priorities for the services your business depends on.

Explore operational outputs →
02 / DATA

Will recovery support usable services?

Consider data availability, integrity and recovery arrangements in relation to business activities.

Explore data outputs →
03 / FINANCIAL

Can the business sustain disruption?

Bring recovery funding, revenue loss, liquidity demands and ongoing operating costs into the discussion.

Explore financial outputs →
04 / PEOPLE

What will your workforce need?

Make productivity, additional workload and specialist support requirements visible.

Explore people outputs →

Understand the approach

Useful questions.
Clear assessment boundaries.

OCRR assesses existing resilience capabilities using agreed assumptions and, where relevant, disruption scenarios. These scenarios are not predictions of a particular attack.

Explore the assessment approach →

Is OCRR a cyber risk assessment?

No. OCRR is focused on cyber resilience to minimise the impact on your business when an attack is successful. A cybersecurity risk assessment is a systematic process used to identify, evaluate, and prioritise digital and operational risks connecting technical vulnerabilities to potential business impacts so companies can apply appropriate security controls.

Is the initial summary about my actual environment?

No. It uses over 500 validated defaults aligned to your industry and size of organisation.

Does the assessment validate technical controls?

Yes. In the Guided assessment we apply your organisation’s actuals to assess their impact against your operational cyber resilience objectives.

How much involvement is needed?

Industry Default Assessment – None
Guided Assessment – Approximately 2 hours
Elevated TTP Assessment – Based on the depth of options you want assessed

Can OCRR help review incident response?

Yes. Our assessments provide efficiency and effectiveness capabilities to adjust your existing IR processes

Start with a clearer conversation.

Start with an Industry Defaults Assessment, then build towards Guided and Elevated.

Discuss OCRR →

Our latest research:

Synergy Six have just published their latest report.


Ransomware Data Protection Vendor Spotlight - NeuShield


Synergy Six believe that organisations need an explicit ransomware data protection solution to protect and recover active data, recovery data, and installed device OS and services during exceptional operations.

These solutions should not replace existing security and data backup and recovery tools.


  • What is Ransomware Data Protection?
  • What vendors believe they address this space?
  • Ransomware Impact Map
  • NeuShield Vendor Assessment




Click here to access the report

Synergy Six Degrees (SSD) provides the most appropriate Go To Market (GTM) strategies for swift and effective implementation. Our products, reports and experience can help your sales, operations and marketing teams increase existing revenue streams, find new ones, boost investor confidence and raise profiles.

  1. SSD analyses the viability of your offering for new engagement.
  2. SSD scrutinises markets and presents products and opportunities for your particular objective, firmly backed up with viability and competitor activity research.
  3. SSD finds differentiating strengths to stand out from the competition.
  4. SSD investigates regions, reporting back on where you could have the most potential for maximum return.
  5. SSD intelligence and product workshops show your teams where the revenue streams are, and how to approach them.
  6. SSD provides staggered outreach campaigns to make the most of your opportunity investment. We focus on your success route to more revenue*.


* SSD derived content typically achieves higher than industry average for email open and click thru rates.


Get your latest cyber insights in under 5 minutes below.

Sign up here for alerts when we publish new 'The 300' episodes.

The 300: One of our 'Numbers' episodes

Is cybersecurity a bottomless pit of market opportunity or a sink hole of wasted budget and missed revenue?


Synergy Six Starters

Engage further with Synergy Six Degrees.

Discover six things that we can help you with right away.


Connect with Synergy Six Degrees below.

What market do you want to reach?

Click the button below and let's set a time to talk.

Link image to schedule meeting with Synergy Six Degrees
Photo by LinkedIn Sales Solutions on Unsplash
Let's engage for more revenue