Help organizations adopt structured risk approaches, apply adaptive frameworks, and build risk estimation capabilities that improve decision-making.
Overview
The Challenge
Most risk frameworks force false precision. They demand single-point estimates when the honest answer is a range. They conflate confidence in the estimate with certainty about the outcome. The result? Decisions that look rigorous but mask critical uncertainty.
How I Help
- ✓ Risk modeling & executive facilitation
- ✓ Framework implementation and customization
- ✓ Risk estimation workshops
- ✓ Vulnerability assessment enhancement
- ✓ Strategic risk advisory
Who Benefits
UC2 Framework
Uniform Confidence/Certainty Estimation (UC2) is a foundational decision framework that separates confidence from certainty in risk estimation. It makes risk transparent and actionable when data is sparse or uncertain.
The Problem UC2 Solves
Traditional risk scoring creates false precision. A "7.5" risk score implies accuracy that doesn't exist. UC2 captures both the estimate AND your confidence in that estimate—giving decision-makers the full picture.
UC2 Methodology
The complete framework paper explaining the theory and application of UC2
PDFRisk Ruler
Practical tool that turns UC2 into a clear, structured scale for risk estimation
PDFRisk Ruler for CVSS
Application of the Risk Ruler specifically for CVSS 4.0 vulnerability scoring
PDFWork with Rob on UC2 Implementation
Let's discuss how UC2 can transform your organization's risk management approach
Get in Touch →Outrage Management
Framework and tool for understanding and responding to social and organizational outrage dynamics. Navigate emotional complexity in risk communication and reputation management.
The Problem It Solves
Risk perception ≠ actual risk. Public outrage often correlates poorly with technical severity. This framework helps organizations anticipate, measure, and respond to outrage constructively.
The Outrage Windsock
Interactive tool for assessing and managing outrage factors
Web/Mobile AppWho Benefits
Discuss Outrage Management
Navigate emotional complexity in your organization's risk communication
Get in Touch →Risk Training
Video-based training courses that build risk estimation capabilities for teams and individuals. Practical, applicable skills—not just theory.
Risk Management Foundations
Foundation course covering core risk concepts and UC2 basics. First module free.
Video CourseCVSS v4 Consumer Implementation Guide
Introduction to the new guide from CVSS to leverage hidden features
Video CourseFor Organizations
Custom training and workshops available. Contact for team pricing and customization options.
Discuss Training Needs →Standards & Industry Involvement
Active participation in standards bodies and industry groups shaping risk management practice.
Current Involvement
- ● CVSS (Common Vulnerability Scoring System) standards body
- ● AIVSS (AI Vulnerability Scoring System) development
Select Past Involvement
- ● NIST Cyber Security Framework (video)
- ● Congressional Testimony (video)
- ● Nation state consulting around the globe
What This Means for Clients
Direct access to emerging standards before they're finalized. Influence on frameworks that will shape your compliance requirements. Early warning on regulatory direction.
Ready to Make Risk Actionable?
Let's discuss how these frameworks and tools can help your organization make better decisions under uncertainty.