Home | Discover CRI

Turning uncertainty into insights.

Cyber Risk Insights (CRI) takes a scenario-driven approach to more accurately assess the likelihood and impact of cyber-attacks. Developed by KPMG’s multi-disciplinary teams, CRI combines 10+ years of cyber risk quantification expertise with best-in-class native visualisations and modelling all in one Cyber Risk Quantification (CRQ) solution.

CRI can help you answer your most important cyber risk questions:

Don’t just take our word for it

Hear from some of our amazing customers.

CRI has provided valuable insights into our exposure to cyber threat scenarios and helped us identify key areas for focussed improvement. It has supported the refinement and validation of our cyber strategy, contributing to greater confidence in our decision making.

Christopher Hicks

Head of Information Security, Data Protection & Enterprise Risk
Principality Building Society

CRI has been a strategic enabler for our business. The value it's delivered already is significant and we've already used the data to inform and guide us in different governance forums. We've tested other solutions and none of them have delivered the value CRI has.

Cyber & Resilience Consultant

Global Packaging Manufacturer

We've worked with CRI for over two years. Unlike other platforms, it provides us with a view of cyber risk in business and financial terms and allows us to forecast and optimise cyber investments across our European investment portfolio. CRI is an important part of how we assess cyber risk and the insights and reporting we get from the platform have supported our decisions making over time.

Cyber & Information Security Operations Advisor

Global Private Equity Firm

CRI helped us truly understand our cyber risks and where to focus. We're more confident in our cyber decisions because of it.

Head of Information Security

Major Financial Services Provider

What set this platform apart for us was how clearly it helped us see where we stood when it came to cyber risk. It wasn't just another tool, it gave us a way to quantify our exposure, understand our risk appetite and have meaningful conversations with leadership on what needed to improve. This kind of insight is hard to come by. Over time, it's built real trust - not just in the product, but in decisions we're making because of it.

Senior Security Leader

Multinational Energy Company

Industry recognition

Finalist for Best Risk Management & Regulation Solution 2025

Finalist for Best Security Product of the Year 2025

Finalist for Security Innovation of the Year 2024

Finalist for Cyber Security New Launch Product of the Year 2024

Leader in Forrester Wave: Cyber Risk Quantification Solutions, Q2 2025

Finalist for Cyber Security Solution Provider of the Year 2026

Finalist for Best Risk Management
& Regulation Solution 2025

Finalist for Best Security Product of the
Year 2025

Finalist for Security Innovation of the
Year 2024

Finalist for Cyber Security New Launch Product of the Year 2024

Our blog

Latest Insights

The latest from the CRI community.

Blog

Mega trends

8 shifts changing how organisations manage risk

Cyber risk isn’t being rewritten by a shiny new framework, it’s being forced to evolve because the way organisations use technology has changed. We unpack eight shifts already surfacing in incidents, audits and boardrooms.

Martin Tyley

March 27, 2026

•

3 min read

Blog

CRQ in action

The hidden variable in cyber risk decisions: The decision environment

Inspired by Nobel prize winner, Daniel Kahneman’s timeless lessons on decision‑making, explore how his ideas can help cyber leaders improve group judgement and overcome bias in strategy discussions.

James Hanbury

March 10, 2026

•

4 min read

Blog

Sector insights

Calculating the impact of a cyber-attack on critical infrastructure

What would a systemic cyber-attack cost the UK economy? We recently conducted a study for the Department for Science, Innovation and Technology (DSIT) to answer that question. The findings show the scale of potential disruption and underline why resilience planning matters.

James Hanbury

March 9, 2026

•

3 min read

View all Insights

Empowering you to make smarter cyber risk decisions.

100+ organisations worldwide

Turning uncertainty into insights.

What is the financial impact of your cyber risk exposure?

Where are your vulnerabilities?

How do you prioritise investment?

Turning uncertainty into insights.

What's the potential business impact of your cyber risk exposure?

Where are you most vulnerable?

How do you prioritise investment?

Don’t just take our word for it

CRI has provided valuable insights into our exposure to cyber threat scenarios and helped us identify key areas for focussed improvement. It has supported the refinement and validation of our cyber strategy, contributing to greater confidence in our decision making.

CRI has been a strategic enabler for our business. The value it's delivered already is significant and we've already used the data to inform and guide us in different governance forums. We've tested other solutions and none of them have delivered the value CRI has.

CRI helped us truly understand our cyber risks and where to focus. We're more confident in our cyber decisions because of it.

Industry recognition

Make smarter cyber risk decisions.
Today.

Latest Insights

8 shifts changing how organisations manage risk

The hidden variable in cyber risk decisions: The decision environment

Calculating the impact of a cyber-attack on critical infrastructure

See CRI in action

Save hours and build better websites.