GRC FlowGRC Flow
  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
FeedbackSign inGet started
  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
  • Share feedback
  • Sign in
GRC Flow

Governance, risk and compliance workspace: policies, risk assessments, gap assessments and evidence that stay connected.

Product

  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
  • About

Frameworks

  • ISO/IEC 27001
  • GDPR
  • NIS2
  • DORA
  • HIPAA
  • PCI DSS

Legal

  • Terms
  • Privacy
  • Legal notice

© GRC Flow

  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact

Run EBIOS RM Workshop 3: Strategic Scenarios

No account needed. Answer a few questions, pay securely, and receive your deliverable right away.

Your company

Your company

The company named in the deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Deliverable

Deliverable

Its title, its author and its structure are yours: they steer what is written.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

As it will appear on the deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Shown as the author of the deliverable; never filled in by the AI.

  1. 1.
  2. 2.
  3. 3.
  4. 4.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

The template's sections are proposed, one per line in order: drag to reorder, rename, remove or add.

What is studied

What is studied

The real situation: the more facts, the closer the workshop is to your company.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

The company or system, what it does, how big it is, what must not stop or leak, e.g. “distribution of medicines to 300 pharmacies from one warehouse in Lyon, orders by a web portal, 24-hour delivery”.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

What the company does, e.g. “pharmaceutical distribution”.

Your ecosystem and threats

Your ecosystem and threats

Left empty, they are proposed from your situation.

StakeholderCategoryDependencyPenetrationCyber maturityTrust

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

One row per entry, e.g. “Cloud hosting provider; supplier; 4; 3; 3; 3”. From 1 low to 4 high. Dependency: how much you rely on it. Penetration: how far it reaches into your systems. Cyber maturity: how well it protects itself. Trust: how far you can rely on its intentions and its word.

Risk sourceTarget objective

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

One row per entry, e.g. “Organised cybercrime; ransom by stopping deliveries”. Comes from workshop 2 if you select it.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

What must not happen: one per entry. Comes from workshop 1 if you select it.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

With your suppliers and partners too, e.g. “security clause in the hosting contract”. Nothing already done is proposed again.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Threat level = dependency × penetration ÷ (cyber maturity × trust). Stakeholders at or above this level are in the danger zone.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Stakeholders at or above this level, below danger, are in the control zone: to watch closely. Below it, they are only monitored.

Anything else to take into account

Anything else to take into account

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Anything the service should take into account.

What the AI provider receives

Your answers, to write this deliverable.

Replaced first, then put back in your deliverable: Email addresses, People's names, Company names.

€1.00

What a free account adds

Running a service never requires an account. An account adds:

  • Your company details filled in for you on every form
  • Every result saved, reusable as a source by any service
  • Results editable in the browser and in the layout editor, with their saved versions
Create a free account