Citalid

Defines and models specific cyber threat scenarios such as ransomware, data breach, business email compromise, or cloud outage as the unit of quantification, tying each scenario to a business decision rather than an enterprise-wide average. Scenario library breadth and support for custom scenario authoring vary across products.

Estimates how likely or how often each modeled scenario is to occur, drawing on native or integrated threat and vulnerability intelligence, adversary technique mappings such as MITRE ATT&CK, historical incident data or actuarial loss datasets to ground the likelihood side of the calculation. Products differ in whether frequency is threat-intelligence-driven, actuarial or expert-estimated, and in whether the intelligence is native to the product or pulled through integrations.

Models the financial loss drivers that set the magnitude of each scenario, including incident response, business interruption, data recovery, regulatory fines, legal liability, and reputational harm. Coverage of secondary and long-tail losses varies across products.

Distributes, collects and scores third-party assessments and security questionnaires from a maintained template library that spans risk domains and standards, with evidence requests, reminders, reviewer collaboration and scoring rules; stronger implementations scope questionnaire depth and cadence dynamically from the third party's risk profile rather than sending one template to every vendor.

Scores each third party's inherent and residual risk and measures its potential impact on the business or supply chain to produce an impact estimate, aggregating domain-level results into a composite score that can be rolled up across the portfolio and correlated with enterprise objectives and control performance.