CIS RAM. CIS® (Center for Internet Security, Inc.) released its first risk assessment method, CIS Risk Assessment Method (RAM). CIS RAM uses a simple equation developed by the courts as the basis for reasonableness in your risk assessment. This method helps you define your acceptable level of risk in a way that creates consensus among executives, attorneys, and regulators.
Learn more about how to define reasonable security with Duty of Care Risk Analysis (DoCRA).