Certus™ Analysis

Proven risk management methodology utilizing sound analytics in conjunction with extensive up-to-date threat, vulnerability, risk mitigation and industry governmental regulation datasets.

Certus Analysis provides powerful benchmarking capabilities that allow enterprises to build a valid and enduring enterprise risk management and compliance strategy. This product facilitates a more productive use of key resources, namely employee time/effort and financial capital. By objectively identifying an enterprise's risk profile and quantifying disparate risks in a common language, management can finally make informed decisions about their risk acceptance, mitigation, transfer and recovery programs. Importantly, the Certus Analysis facilitates improved ROI for the enterprise by providing an objective basis for allocating resources and money, based on Annual Loss Expectancy (ALE).

Certus Analysis employs qualitative scales of 1 to 9 in the areas of:

  • Business Loss Sensitivity
  • Human Loss Sensitivity
  • Probability of Occurrence
  • Relative Asset/Risk Tolerance Value
  • Safeguard Effectiveness
  • Safeguard Strength
  • Frequency Information Tied to Location

Domains
Certus Analysis contains 17 defined domains, identified for performing most physical risk assessments. These domains are associated with a question library containing over 3,200 questions. These domains include:

  • Facilities Management
  • Operations Management
  • Sensitive Materials Control

Business Processes
With 32 identified business processes, Certus Analysis has unlimited capacity to increase as each company requires.

Asset Categories
Certus Analysis supports unlimited tangible and intangible asset categories and is pre-populated with 20 defined asset categories.

The Physical Risk module has been mapped to conform to multiple assessment frameworks including ASIS, NIST and intermedial "Best Practices." It has the ability to provide both qualitative and quantitative assessments at the "click of a mouse." Each area of the assessment process in the physical module contains information content that has been pre-populated and drawn from the combined knowledge and experience of risk analysts in the field. The open solution gives the risk practitioner the ability to customize and tailor the system easily.

The Certus Analysis Physical Risk assessment and analysis process captures information relating to the facility being assessed or analyzed for risks taking into account all of the locations, user Domains, business processes and qualitative Risk tolerances. This includes the industry vertical and NPV standards defined by the Company.