← OCRR overview

Your rating and report

A shared resilience picture. Detail your executives can use.

The initial Operational Cyber Resilience Rating brings four connected disciplines into one visual view using industry-default assumptions. This industry-generic summary is a starting point for discussion and does not reflect your organisation’s actual environment.

Industry and Organisation Dynamics Representation

A consultant-led Guided Assessment refines the review with information about your organisation, its existing capabilities and recovery arrangements.

Understand the rating behind the conversation.

The overall OCRR rating combines separate views of Operational, Data, Financial and People Resilience. Industry-default discipline findings highlight topics for guidance and further enquiry. Organisation-specific findings require a Guided Assessment.

Your initial Industry Defaults Assessment provides an industry-based baseline. A further Guided Assessment refines the review using information about the capabilities and recovery arrangements already in place in your organisation.

The rating supports assessment and prioritisation. It does not itself validate technical control effectiveness, guarantee recovery performance or predict the outcome of a specific attack.
Illustrative OCRR rating with Operational, Data, Financial and People Resilience disciplines
Illustrative rating. Industry-default results are not a measurement of your actual environment.

Four disciplines. One executive discussion.

Illustrative Operational Resilience rating

Operational Resilience

Understand recovery capability, continuity arrangements and priorities for critical services.

Illustrative Data Resilience rating

Data Resilience

Examine availability, integrity and recovery arrangements in relation to the business activities that depend on your data.

Illustrative Financial Resilience rating

Financial Resilience

Consider your organisation’s ability to fund recovery and sustain the business through revenue loss, liquidity demands and ongoing operating costs.

Illustrative People Resilience rating

People Resilience

Make workforce productivity, additional workload and specialist support requirements visible.

These sample icons demonstrate the presentation, not a measured customer result.

What is in your Executive Summary?

Your initial no-cost assessment produces a five-page Executive Summary within 2 days, using industry defaults.

  • OCRR rating and four-area breakdown: a common starting point for leadership.
  • Financial context: implications under the stated recovery assumptions.
  • Key findings: industry-based capabilities and assumptions to consider for further review.
  • Practical next steps: where to investigate or refine the assessment.

You can start without asking your teams to gather information. Guided and Elevated assessments build on this initial baseline.

Illustrative five-page OCRR Executive Summary
Illustrative report presentation.

Role specific content.

Clear, visual and detailed output that your CEO, CFO, CIO, COO and CISO can quickly understand. Guided includes role based findings and guidance, refined using your organisation’s information.

Executive perspective How to use the assessment
CEO and board Discuss the overall resilience position, priorities and decisions requiring ownership.
CFO Challenge financial assumptions, compare costs and examine the case for proposed investment.
COO Review operational priorities, critical services and recovery arrangements.
CIO and CISO Connect the findings with existing technology, security arrangements, policies and technical evidence.
Illustrative role specific OCRR report pages
Illustrative report views.

Take the findings into your next decision.

  1. Review the baseline: identify which assumptions require organisation-specific refinement.
  2. Use Guided: bring existing environment and policy information into a more detailed assessment.
  3. Agree priorities: connect capability findings with operational ownership and business objectives.
  4. Appraise improvements: use Elevated to compare changes, then obtain the evidence needed before implementation.

A further Guided Assessment requires less than 2 hours of your time, with a detailed overview within 7–14 days. Agree scope, information requirements and commercial terms when arranging it.

Clarity today. A more resilient tomorrow.

Make your next resilience decision better informed.

Start with a no-cost, industry-based Executive Summary. Then decide whether to refine the assessment around your organisation and explore improvement options.