On behalf of the Ministry of Defence (MOD), we developed a risk model for the assessment of cyber risk. In conjunction with our partner, Riskaware, designed the software tool which enabled the risk model to be operated by MOD analysts. This software tool and the model on which it is based now forms the foundation of the MOD’s developing cyber risk assessment method.