PRMIA CCRM case studies
PRMIA CCRM · Put your knowledge to work in context.
It suits risk, operational risk, compliance, audit, and technology professionals who need to reason about cyber exposure in business terms and support decisions on controls, reporting, and resilience. Study is best organized around the three natural phases named in PRMIA's own framing: identifying cyber risk (assets, threat landscape, dependencies, third parties), assessing it (scenario analysis, quantification, control effectiveness, aggregation), and managing it (treatment, governance, monitoring, and communication to stakeholders). The PRMIA CCRM case studies are 5 cases and about 3,230 words.
1Infusion Pump Fleet Discovery and Ownership
Northbridge Health is a 620-bed regional hospital with 1,450 networked infusion pumps. After enabling vendor remote monitoring, biomedical engineering finds its asset inventory covers only 910 pumps; 540 are undiscovered or unmanaged.
727 words, about 4 min2CVSS Backlog Versus Scenario-Based Risk Ranking
Meridian Pay is a payment-orchestration SaaS with 3.2 million stored customer records and 120 microservices across 14 AWS accounts. A quarterly scan produced 2,300 findings: 37 CVSS 9.8 findings on internet-facing APIs protected by a WAF, and one CVSS 7.5 flaw on an internal legacy billing server that holds tokenized card data and has no known public exploit.
519 words, about 3 min3Ransomware at a Tier-1 Automotive Supplier
Arcadia Components is a Tier-1 automotive supplier with 14 plants. Ransomware encrypted the ERP and manufacturing execution system (MES) at its largest plant on the Friday before a Monday production run.
668 words, about 3 min4Undisclosed Subprocessor in a Critical SaaS Vendor
Helio Bank has 220 active SaaS vendors, 18 designated critical. A new operational-resilience rule requires a complete register of ICT third-party providers, including subcontractors and data flows.
644 words, about 3 min5Justifying a Resilience Project Against Risk Appetite
Coastal Freight operates 14 automated distribution centers. Its warehouse-management system runs in a single cloud region, and 2,100 handheld scanners depend on it.
672 words, about 3 min