RAOF - Static Risk Assessment and Optimization Framework

The main goal of RAOF is to support the MEDINA certification verification process with a risk-based evaluation of non-conformities of a cloud service. 
SATRA (Self-Assessment Tool for Risk Analysis) is based on a simple and quick approach to cyber risk self-assessment. 
The tool requires two types of input: information about security measures and information about key assets of the enterprise. When these inputs are provided, the tool estimates the expected risk level and computes a deviation from the expected risk level for the same service but with all requirements implemented. This risk-based approach ensures that all important requirements are implemented and the missing ones do not significantly affect the risk level for this cloud service.