GRC: Cyber Risk Institute (CRI) Profile Accelerator
Drive better cyber compliance management for financial service organizations
Install Trend
View Install Data
| Date | Install Count | Change |
|---|---|---|
| 2026-09-09 | 0 | - |
| 134 days of no change | ||
| 2026-04-27 | 10 | -10 |
| 180 days of no change | ||
| 2025-10-28 | 9 | +1 |
| 63 days of no change | ||
| 2025-08-25 | 8 | +1 |
| 62 days of no change | ||
| 2025-06-23 | 7 | +1 |
| 2025-06-22 | 6 | +1 |
| 25 days of no change | ||
| 2025-05-27 | 5 | +1 |
| 11 days of no change | ||
| 2025-05-15 | 4 | +1 |
| 6 days of no change | ||
| 2025-05-08 | 3 | +1 |
| 56 days of no change | ||
| 2025-03-12 | 2 | +1 |
| 22 days of no change | ||
| 2025-02-17 | 1 | +1 |
About
The Cyber Risk Institute (CRI) consists of framework profile and assessments that enable organizations to strengthen cyber compliance management. This framework includes comprehensive diagnostic statements (control objectives) aligned with NIST CSF 2.0 and is mapped to financial services regulatory references, such as FS citations from Federal Financial Institutions Examination Council Cybersecurity Assessment Tool (FFIEC CAT).
With the Cyber Risk Institute (CRI) Accelerator offering, customers can:
- Import a CRI profile that includes relevant authority documents, citations, and control objectives based on NIST CSF.
- Streamline risk management with automated tiering and selection of CRI assessments, conducted using the smart assessment engine.
- Automate control creation based on the tier and generate a compliance score from the CRI assessment responses, which then roll up to the entity level.
Key Features
The Cyber Risk Institute (CRI) Accelerator enables financial service institutions to implement appropriate controls tailored to their type and size. It drives standardization to improve efficiency, enhance compliance, and reduce risk.
The accelerator includes:
- A CRI profile that aligns with NIST CSF v2.0, containing detailed diagnostic statements (control objectives) and mapping to financial services regulatory references (FS citations).
- Out-of-the-box content for NIST CSF v2.0, FFIEC CAT, and the CRI Profile.
- Applicability across four tiers for institutions of different sizes.
- Automatic identification of CRI assessments based on tiering assessment results.
- Tiering and CRI assessments conducted using the smart assessment engine.
- Automatic creation of controls based on tiering results.
- Detailed guidance and instructions for each CRI assessment question, including recommended evidence and required justification.
- Automatic calculation of a compliance score based on CRI assessment responses, with scores rolled up to the entity level.