ROCA

business evaluation by providing an independent rating representing the commercial value of other companies' cyber security management programs for commercial purposes; providing, updating, and compiling indices representing the dollar value of the cyber risk exposure of a company; business evaluation providing commercial cost and benefit analysis ratings representing the cyber vulnerability of a company; business risk assessment services providing a commercial cost and benefit analysis report representing a company's cyber performance and related risks; business advisory and research services specializing in the use of analytical and mathematical models for assessment of business risk arising from the cyber risk exposure of a company; providing statistical information and analysis of cyber security performance and financial metrics translated into dollar values, ratings, and indices for business purposes; providing indices of quantitative information representing cyber security performance and financial metrics of particular companies; Compiling and analyzing cyber security metrics for business purposes; providing indices of information related to a company's cyber security business performance metrics and its financial performance metrics for business purposes

Financial evaluation by providing a rating representing the financial value of a company's cyber security management program; financial risk assessment services by providing financial ratings representing the cyber vulnerability of a company; financial risk assessment services by providing a dollar value representing a company's cyber performance and related risks; financial advisory and research services specializing in the use of analytical and mathematical models for assessment of financial risk arising from the cyber risk exposure of a company; financial advisory and research services specializing in the use of analytical and mathematical models for assessment of the financial value of a company's cyber security management program and providing reports related to the same; providing statistical information and analysis of cyber security performance and financial metrics translated into dollar values, ratings, and indices for financial purposes