THE SECURITY BRUTALIST

Score a System in Five Questions

The Rapid Risk Image Tool asks five questions about one system and turns the answers into three ratings, susceptibility, detection, and recovery. Those are the same three numbers Survivability Engineering has been building toward this whole time. Detection and recovery together describe how long you'd stay failed. Susceptibility describes how easily someone gets in to cause that failure in the first place.

Run the tool on one system you already worry about. If any rating comes back High, that's the number to work on first, and the focus list under the result is where to start, not something to read and set aside.

One system tested proves the idea works. Running it against your next two or three most consequential systems is what actually tells you where to spend your time.