Cyber Risk Institute accelerator

The Cyber Risk Institute (CRI) is focused to collaborate with the financial sectors and regulators to streamline standardization across risk management. For better cyber compliance management, CRI provides a CRI Profile with the financial sector consensus.

The CRI framework profile aligns with NIST CSF v2.0. The CRI profile and assessments assist you in implementing the CRI framework to enhance cyber compliance management. This framework includes detailed diagnostic statements such as control objectives aligned with NIST CSF 2.0 that map to the financial services regulatory references such as financial services citations from FFIEC CAT and others.

As part of the Cyber Risk Institute's (CRI) Accelerator, you can:

• Import a CRI profile containing relevant authority documents, citations, and control objectives based on NIST CSF.
• Streamline the compliance process with automated tiering and selection of CRI assessments, conducted using the smart assessment engine.
• Create controls automatically based on tier and generate a compliance score from the CRI assessment responses, which roll up to the entity level.

For more information, see:

• Perform CRI tiering questionnaire to determine the tier value of entity.
• Verify the NIST CSF Use Case Accelerator.