Cryptoramic
EN
Cryptoramic
Book a demo

A worked assessment example

From a cryptographic finding to a change your team can own

One application team, one agreed environment, and a finding that needs a decision. Follow the work from collection to a verified change.

Review policy findings and the assets they affect.
Review policy findings and the assets they affect. · Illustrative assessment data

Agree the question before collecting

An application team wants to understand which certificate and configuration issues it can resolve itself, and which cryptographic changes depend on a software supplier. It selects one environment and agrees the permitted collection method with the system owner.

This is an illustrative workflow, not a customer case study or a promised result. The images are actual Cryptoramic views populated with illustrative assessment data. Each shows a stage of the review; they are not a record of a single customer engagement.

Discover: establish what was observed

Collect from the approved sources and review the inventory. Retain the file, host or software context behind each finding. A certificate discovered in an image establishes presence; whether the application uses it may need configuration or runtime evidence.

Cryptoramic asset relationships connecting an observed cryptographic object to its related assets and sources.
Trace a finding to its source · Illustrative assessment data

Investigate: decide what matters in this environment

The team reviews policy findings against the selected requirements. It checks applicability, ownership and operational impact before accepting a proposed action. A finding is a starting point for review, not proof of organizational non-compliance.

Act: separate a local fix from a supplier dependency

An expired certificate may call for replacement by the application owner. A cryptographic library upgrade may need a software release. A supplier-controlled product may require a readiness statement for the deployed version before a migration can be planned.

Cryptoramic action plan showing a certificate replacement action and suggested execution steps for review.
Review the proposed action · Illustrative assessment data

The Technical Queue supports investigation; the Program Plan helps organize work. The Executive Brief gives the sponsor the decisions and dependencies that require attention. Explore all four report views.

Verify: check the result rather than assuming success

After the approved change, collect again and compare the findings in the same scope. Confirm the intended change, investigate unexpected results and retain any unresolved supplier questions. Agree the next scope only when the team understands the first result.

See how an assessment is scoped, compare collection methods or discuss delivering this service to your customers.

What would you assess first?

Bring an application, image or network segment. We can show a relevant example and discuss access, deliverables and a useful first question.

Scope an assessment

Product screenshot

Illustrative assessment data