Companies specializing in cyber risk assessment for identification, analysis, and quantification of threats to IT, OT assets, and corporate data. Includes qualitative and quantitative methodologies, ISO 27005, NIST RMF, FAIR frameworks, business impact analysis (BIA), gap analysis against industry standards, support for mitigation decisions, and regulatory compliance such as NIS2, DORA, and GDPR.