Duty of Care Risk Assessment (DoCRA)
Duty of Care Risk Assessment (DoCRA). Whether you want to implement CIS controls or harmonize with other control sets (PCI, NIST, ISO, etc.), CIS RAM’s duty of care based risk assessment process is easy to adopt and holds up to the scrutiny of regulators, attorneys, and executive management.
- perform it on your own or
- get help from a professional services organization steeped in the method, with hundreds of successful implementations.