Cyber capability forecast
Cyber Future
“How much people, process and technology capability do we need to stay within risk appetite in 90 days, 1 year and 3 years?”
Why teams buy this
- The decision
- How much people, process and technology capability do we need to stay within risk appetite in 90 days, 1 year and 3 years?
- Cost of a wrong call
- A budget request the board cannot size, or a pillar that breaches tolerance before anyone predicted it.
- What you'd do otherwise
- A maturity assessment that describes today, not the gap you will face in one or three years.
- What you see first
- The capability multiplier each pillar needs at 90 days, 1 year and 3 years, as planning and stress ranges, and the drivers that move it most.
- Start here
- Buy the Power BI pack ($690) and run it on your own exports, or start with the free Business Soundcheck. See the pack
What it shows
- A Capability Growth Index projecting the multiplier each pillar needs against a target baseline.
- A threat sprawl index built from public vulnerability data (CISA KEV, NVD, CVSS).
- Driver contribution: which assumptions move the forecast most, with their ranges.
- AI and technology sprawl velocity, quarter on quarter.
Outcomes
- Turns "we need more budget" into a quantified, time-bound capability gap.
- Shows which pillar breaches tolerance first.
- Gives an investment conversation a defensible basis.
Built for: Executives and boards building a multi-year cyber investment case, and risk and strategy teams.
Product specification
Four report pages: Cyber Risk Futures, Target Capability Growth, Driver Contribution Deep-Dive, and AI & Technology Sprawl Velocity.
The threat curve is sigmoid-fitted to public vulnerability data. Each driver carries a minimum, most likely and maximum value, and a 5,000-run PERT Monte Carlo turns them into ranges for People, Process and Technology at each horizon, with P50 planning and P90 stress views. Every driver and assumption is documented in a methodology companion.
- Pages
- 4
- Horizons
- Now · 90D · 1Y · 3Y
- Simulation
- 5,000-run PERT Monte Carlo
- Format
- Power BI (PBIP)
How it's delivered: days, not months
- ScopeA short call to agree the decision it needs to support and which data you already have.
- LoadYour exports go into the model's CSV templates. No live connection to your systems is needed to start.
- RunThe model runs on your data, and every number traces back to its inputs and the documented method.
- Hand overYou keep the Power BI file, its design walkthrough and engineering companion, or our practitioners run it with you each month.
What's in the box · Cyber Future pack
Power BI report
- Cyber Risk Futures
- Target Capability Growth
- Driver Contribution Deep-Dive
- AI & Technology Sprawl Velocity
Guides
- Design Walkthrough, 17 pages (PDF and Word)
- Engineering Companion, 28 pages (PDF and Word)
- Agent implementation kit: ordered steps with a check at each one, a file manifest with checksums, a JSON Schema for every data file and a validator, so an AI agent or engineer can implement it without guesswork
Data
2 model parameters · 2 synthetic sample data · 3 report text · 2 derived from public data CSV files. The sample organisation is a sample organisation's cyber capability baseline; no real client data is included.
How results are calculated
The capability baseline and forecasts come from Signal Band's Cyber Future engine (5,000-run Monte Carlo) before the data is loaded; the calibration stays with the engine. Threat-sprawl series are derived from public vulnerability data. The pack ships results for a sample organisation. To recalculate for your own organisation, run the engine on your inputs: 10 credits a run through the API once the cyber-future engine is live, and until then email your inputs to [email protected] and we run it for you at the same credit cost.
Verify your install: the guide lists 3 numbers the report must show on the sample data.
You need
- Power BI Desktop (Windows)
- Deneb custom visual (free, Microsoft AppSource)
Not included
- Implementation support
- Technical support beyond documentation
- Practitioner interpretation (available as Practitioner Review)
One-off payment, no subscription. One organisation. 12 months of updates. Every download is stamped with your licence record. Digital products are delivered immediately, so purchases are not refundable except where the law requires (your Australian Consumer Law rights are not affected). Licence terms.
Three ways to use it
Self-serve · engine
Engine coming soon
This product's engine is being prepared for the API. Run the free Soundchecks in the meantime.
DevelopersSelf-serve · Power BI
Buy the pack · $690
The Power BI report, guides, sample data and agent implementation kit listed above. One organisation, 12 months of updates, no support.
With a practitioner
Set up and run with you
A practitioner runs it on your data and interprets the result. Sized per client, starting with a $750 Practitioner Review.
Book a walkthroughSee Cyber Future running on your own data.
More in Futures
AI Future How fast AI adoption and AI-related threats are growing against the governance you have. 
IT Future: Tech Debt The monthly cost of technical debt, a priority register, and what a given budget pays back. 
IT Future: Workforce & Capability Capacity against demand, key-person risk and the skills gap, with the cost of closing it.