Risk

– Enter values

Scenario

Name Causal chain

Likelihood

Impact and criticality

Resilience

Technical severity

CVSS v4.0 base score

–

Manual score (overrides vector)

Treatment package

Result

Residual ÷ tolerated

–

Sensitivity ±0.10

Quantitative results are relative decision-support indicators, not predictions of loss. Estimates need validation; risk decisions belong to management.

CVSS v4.0

––Base (CVSS-B)

Paste a vector

CVSS measures the technical severity of a weakness, not organizational risk. Use it inside the CRG formula, never on its own. Scoring follows the FIRST CVSS v4.0 specification (base metrics).

Register

Scenarios sorted by residual ÷ tolerated

Import JSON

The register is stored only on this device. Export it regularly; the JSON file opens in the CyberRiskGuardian plugin (crg_calc.py, build_workbook.py).

Budget

––of IT budget

Inputs

Total IT budget incl. salaries

Appetite-consistent cybersecurity budget

–

Planned cybersecurity spend

Year 1 Year 2 Year 3

Year	Spend	% IT	Implied appetite

Guideline: a cybersecurity budget of 4% to 12% of the total IT budget, salaries included. 4% reflects a risk-seeking position (appetite 0.70), 7.8% the risk-neutral median (0.50), 12% a risk-averse position (0.30). Linear between anchors.

Assistant

✦Apple Intelligence through the Shortcuts app

Generate scenarios

Organization context Number of scenarios

About the current scenario

–

Ask a question

Question

Setup

Create the “CRG Assistant” Shortcut (2 minutes, once)

Open the Shortcuts app, tap +, and name the shortcut CRG Assistant exactly.
Add the action Use Model (Apple Intelligence). Choose Private Cloud Compute for the best scenarios, or On-Device to keep everything on the iPhone. Do not choose ChatGPT for confidential work.
Tap the request field and insert the Shortcut Input variable. If Shortcuts adds “Receive input from”, set it to Text.
Add Copy to Clipboard with the model's Response.
Add Stop and Output with the Response.
Optional: add Show Notification “Result copied. Return to CRG.”
Tap Test the Shortcut below.

Requires an iPhone with Apple Intelligence (iPhone 15 Pro or later), a recent iOS with the Use Model action, and Apple Intelligence turned on. Availability depends on language and region.

The app sends only the text shown in each request to your Shortcut. On-Device keeps it on the iPhone; Private Cloud Compute processes it on Apple servers without retaining it. AI output is an analytical hypothesis to validate: it never changes your numbers by itself.