Improve oversight and ownership of your cyber risk and accelerate your journey towards real-time quantified cyber risk management capability with our Managed Cyber Risk (MCR) solution.
The cyber security industry has spent the last 20+ years trying to improve the way it can quantify and manage cyber risk. But there are still no established industry good practices so we are looking to set the benchmark.
Our MCR solution includes cyber risk advisory and managed services enabled by a tech platform powered by Microsoft. Complementing your existing governance, risk and compliance (GRC) investments, we can support you in accelerating time to operationalise a cyber risk management framework.
The benefits of Managed Cyber Risk
Our platform improves cyber risk oversight and ownership
The simple questions executives are asking are answered at different levels using different reporting which MCR provides
Our platform accelerates the journey to real-time risk decision making
MCR provides the models, integrations and automation to enable this ambition using hard data
Our platform delivers value in a variety of situations
MCR excels in both mature and emerging environments, unlocking the full potential of existing investments in cyber risk management and controls.
Our platform is a valuable risk decision aid
MCR is a self-service low-code SaaS platform which has been designed by experienced cyber risk professionals
Comparison between MCR and governance, risk and compliance (GRC) tools:
MCR has unique features that differentiates it from traditional GRC platforms and can help complement them by providing deep dive risk analytics into the cyber risk domain, including:
Flexible cyber risk model that supports both deterministic and probabilistic modelling of risks to suit the needs of both mature and immature clients.
Customisable pre-loaded content that includes multiple industry control standards mapped to good practice risk factors (i.e. risks, threats and metrics).
Integrated threat intelligence leveraging PwC’s global platform that provides strategic and technical intel on incidents, threat actors and campaigns.
Continuous controls monitoring based on ingestion of telemetry from security posture management platforms using APIs to calibrate assessment scores.
Sophisticated benefits management that enables the measurement of the control improvement contributions of a portfolio of risk treatment activities.
Complimentary services that support continuous tuning of the risk model, assessment of risk factors, integration of data sources and curation of reports.
Our retainer services help you stay on top of your risks
Managing cyber risk in a volatile environment is challenging. We offer retainers featuring a prepaid pool of hours to aid rapid response to your needs.
- Core Support
- Assess Support
- Treat Support
Core Support
A. Re-calibrate the risk model
- Benefit:
- Avoid algorithmic inertia
- Example:
- Reflect higher confidence in controls data
B. Curate bespoke report
- Benefit:
- Address board and regulator topics
- Example:
- Deep-dive into ransomware exposure
Assess Support
C. Configure CCM connection*
- Benefit:
- Automate controls monitoring
- Example:
- Integrate new CSPM platform
* Continuous controls monitoring provided by security posture management platforms or via bespoke data lakes
D. Perform assessment
- Benefit:
- Skills or capacity constraints
- Example:
- Assess threats using PwC threat intel
Treat Support
E. Prioritise control treatment
- Benefit:
- Maximise return on investment
- Example:
- Re-shape portfolio due to budget cut
F. Stay abreast of good practises
- Benefit:
- Address new threats or technologies
- Example:
- Mitigate more convincing GenAI phishing lures
Why choose us? - Our industry recognition
Cracking the Code: Real-time cyber-risk management for modern businesses
Clear and Current Cyber-Risk Posture Visibility and Management Fast Becoming a Corporate Must-Have.
Contact us
