open source
MONARC risk assessment method and platform

Digital transformation is a slogan that is becoming a reality for many companies. It is no longer about using information technology to do the same thing more effectively; it’s about transforming the company and its products in depth. The potential for innovation is immense and the technical challenges are tangible. Chief among them is the need to secure increasingly interconnected processes that circulate astronomical amounts of data.

At the same time, the legal requirements for data protection are being strengthened, particularly with the coming of the European General Data Protection Regulation (GDPR). Given these evolutions, it is better to reinforce one’s defenses in terms of cybersecurity.

CASES have been supporting companies and administrations in their efforts for more than 14 years. It is in this perspective that the MONARC (Method for the Optimization of Risk Analysis CASES) method and tool has been developed, and which enables companies to carry out risk analysis by benefiting from the accumulated experience of others.

Why using MONARC ?

1. The need to manage the risks related to information security are becoming more and more evident;
2. MONARC saves up to 80% of the time needed for a complete risk analysis as it is based on shared risk profiles;
3. The MONARC tool is supported by a completely open source ecosystem, which avoids software license fees and allows users to modify it and to make it evolve according to their own needs.

This last advantage deserves to be emphasized: indeed, there are few open source risk analysis tools. This has several advantages:

1. Access to the source code of the tool makes it possible to adapt MONARC to specific needs
2. MONARC is completely free
3. Users do not need to depend on a single provider. They can choose any competent provider to help them develop or customize MONARC.
4. Bug fixes and the development of new features are done by the same development community that participated in the project. They do not depend on the goodwill of a specific software publisher. Given the marked interest in MONARC, this community should be able to expand and continually advance the functionality of the tool.

The success of these method attests to the relevance of the approach proposed in terms of risk analysis. It is also a guarantee of the evolution of the tool, as the tool is enriched and improved with each application.

Further details and/or requests to get access to MONARC is available online on http://monarc.lu/