RETACH CRQ ENGINEβ„’ Β· Cyber Risk Quantification + Live OSINT Pre-Assessment
← Free Scanner Premium Tool
CRQ Engineβ„’ Β· S.I.N.S. Framework

What are your security gaps
costing you β€” in KES?

The RETACH CRQ Engine translates your S.I.N.S. posture into Expected Annual Loss β€” scenario by scenario, pillar by pillar. Run a live OSINT surface scan. Get a board-ready financial risk model in minutes.

ISO 27005 risk model Kenya-calibrated benchmarks Live DNS + SSL + breach OSINT EAL in KES + USD Serianu / CBK data ODPC fine exposure
Organisation Profile
Step 1 of 2
Organisation
Annual Revenue / Turnover / BudgetKES 50.0M
Figure in KES millions β€” e.g. 50 = KES 50M. Use turnover (SME/fintech), total assets (SACCO) or annual budget (NGO/govt).
Staff / Endpoints50 people
S.I.N.S. Posture (from scanner or estimate)
SΒΉ β€” Systems (Identity & Access)50 / 100
SΒ² β€” Infrastructure (Backup & DR)50 / 100
SΒ³ β€” Network (Perimeter & Segmentation)50 / 100
S⁴ β€” Security (incl. governance & policy controls)50 / 100
Risk Modifiers
AI Exposure

Only shadow-AI visibility changes the estimate (data-breach severity, IBM 2025). Policy and access-control answers are recorded for your S.I.N.S. posture but carry no KES effect until a sourced coefficient exists.

Free Scanner vs. CRQ Engine
What you're unlocking
Free Scanner
S.I.N.S. score / 100
4-pillar breakdown
Critical findings list
Book consultation CTA
Expected Annual Loss (KES)
Scenario heatmap
EAL per scenario
Live OSINT scan
Regulatory fine exposure
Kenya sector benchmark
Control ROI ranking
30/60/90-day roadmap
CRQ Engineβ„’ Β· You are here
S.I.N.S. score / 100
4-pillar breakdown
Critical findings list
Book consultation CTA
Expected Annual Loss (KES)
Scenario heatmap
EAL per scenario
Live OSINT scan
Regulatory fine exposure
Kenya sector benchmark
Control ROI ranking
30/60/90-day roadmap

Fill your profile and click Calculate to run the full model. For a consultant-delivered version with live identity & access assessment data, request a quote.

These seven numbers answer one question: what could a bad year cost you, and how confident are we in that number? The three highlighted tiles are loss figures in KES; the rest give you context on how that number was built.

Expected Annual Loss
β€”
β€”
Data Credibility (Z)
β€”
β€”
Severe-Year Loss
β€”
95th-percentile annual loss
S.I.N.S. Score
β€”
β€”
Regulatory Fine Exposure
β€”
ODPC max
Risk as % of Revenue
β€”
EAL / annual revenue
Est. Recovery Time
β€”
downtime, ransomware event

Sector risk baselines from published industry data β€” the starting point for every RETACH engagement. Refines to your organisation once you calculate.

Likelihood (cols) Γ— Impact (rows). Darker = higher combined risk. Scenario codes plotted by calculated EAL and likelihood.

Critical
High
Medium
Low
Minimal
Rare
Unlikely
Possible
Likely
Almost certain
Critical Medium Low

EAL = modelled frequency (Poisson Ξ») Γ— severity (Lognormal), per scenario, summed. Likelihood = probability of β‰₯1 event this year given your control posture. Sorted by EAL.

ScenarioPillarLikelihoodEAL / yr

Live, unauthenticated checks against your own public-facing footprint β€” DNS, SSL, and known ransomware activity. Results feed into your Attack Surface Score, which nudges how often an incident is expected β€” not how badly it would hurt if one happened.

⬀ Loading live ransomware threat intelligence…
Domain Surface Scan
The domain you enter is sent to our server (UK) to look up public records. Only check domains you own or are authorised to assess. Privacy notice
Live OSINT Pre-AssessmentEnter a domain above to run real DNS, SSL, and breach checks.
Results feed directly into your EAL model likelihood scores.
πŸ” Credential & Dark Web Exposure
β–ˆβ–ˆ accounts
Employee credentials from your domain may be circulating in breach databases and criminal marketplaces. RETACH checks HIBP, DeHashed, and dark web sources as part of every paid assessment.
Exact count of breached employee accounts
Breach source, date, and data types exposed
Named dark web marketplace mentions
Ransomware actor targeting intel for your sector
Unlock in Health Scan β†’
Included in every Health Scan from KES 45,000
Powered by HIBP Β· DeHashed Β· RETACH threat intelligence

Ranked by EAL reduction. Implement top-to-bottom for maximum risk ROI per KES spent.

Your top EAL-reducing actions, grouped into a 30/60/90-day sequence. Work top-to-bottom within each window for the fastest risk reduction per KES spent.

Kenya sector benchmarks: Serianu 2024/25 Β· CA Kenya Annual Report Β· CBK Cybersecurity Guidelines Β· ODPC enforcement data Β· Kenya Digital Risk Index (4,406 OAG audit findings, 562 entities).

Ready to replace estimates with evidence?

The CRQ Engine gives you an estimated financial model from your own inputs. A RETACH Digital Resilience Assessment replaces those estimates with evidence from your own systems: verified findings, a scored executive report, a risk heatmap and a 30/60/90 roadmap. Need board-ready exposure figures in KES, with a before-and-after? Ask about Full CRQ, from KES 350,000 (β‰ˆ USD 2,700).

Request a Digital Resilience Assessment quote β†’
Evidence from your systemsScored executive reportRisk heatmap30/60/90 roadmapTimeline agreed in your SOWFrom KES 120,000Valid to 31 March 2027