Asset Categories on one axis, Attack Tactics & Techniques on another, Cyber Risk as height. The colors are not fixed. Risk rises and falls across the surface in real time, peaks erupt where exposure concentrates, and the blue fog of the unknown spreads faster than anyone is watching.
CRMLCyber Risk is never still. By the time a periodic snapshot is read, the surface it described has already changed shape.
A living surface is read continuously, asset by asset. That continuous reading is part of the Cyber Risk Management Lifecycle (CRML).