Skip to Main Content
Talk Intermediate MIT License

Cyber Risk Modeling Language [CRML]

Proposal status is Review Pending
Session Description

I propose to present CRML

CRML is an open, declarative, engine-agnostic and Control / Attack framework–agnostic Cyber Risk Modeling Language. It provides a YAML/JSON format for describing cyber risk models, telemetry mappings, simulation pipelines, dependencies, and output requirements — without forcing you into a specific quantification method, simulation engine, or security-control / threat catalog.

CRML enables RaC (Risk as Code): risk and compliance assumptions become versioned, reviewable artifacts that can be validated and executed consistently across teams and tools.

https://github.com/Faux16/crml

Key Takeaways

  • Understanding the Cyber Risk Modeling Language

  • Able to write any cybersecurity data into CRML

  • Handling validation error in CRML

  • Running CRML engine to quantify cyber risks.

References

https://github.com/Faux16/crml

Session Categories

Contributing to FOSS
Tutorial about using a FOSS project
Talk License: MIT License

Speakers

Sanket Sarkar
Sanket Sarkar Founder | Zeron

Entrepreneur, Hacker, and Mathematics geek—founder of Zeron, a cyber risk posture management platform built on mathematical modelling and quantitative analysis. My journey, much like solving intricate equations, has evolved from hacking to developing solutions that decompose cyber risk into measurable variables, enabling precise, data-driven strategies.

https://www.linkedin.com/in/infosecsanket/