I designed and built the Control & Risk Calculator, an online algorithmic tool for IT control assessment, tracking, and prioritization.

For each control objective added by a user, the CRC calculates a remediation priority based on:

  1. Control characteristics
  2. How well the control is supported
  3. Environmental threat level
  4. Organizational risk tolerance
Control and Risk Calculator
CRC expanded view
CRC questionnaire exerpt
CRC questionnaire sample

Go to live implementation on Truth to Power (T2P):resource link