Assessment Methodology

ISO 22301:2019

CHARIS provides business continuity trigger monitoring aligned to ISO 22301:2019, specifically clauses 8.2 (Business impact analysis and risk assessment) and 8.4 (Business continuity plans and procedures). Each trigger represents a disruption condition with a defined activation threshold. Trigger status is assessed on a strict binary basis (BREACHED / NOT BREACHED) - no partial or conditional statuses are used.

Thresholds are set deliberately high because a BREACHED status represents a formal activation decision. Situational awareness, concern, and emerging risks are communicated through the narrative commentary, not through trigger status. A false positive (BREACHED when the formal threshold is not met) is treated as equally harmful as a false negative, as it triggers unnecessary and costly business continuity activation.

Your risk assessment is tailored to your organisation's specific threat profile. The triggers you select determine what is monitored and what constitutes a breach. Two organisations operating in the same country may receive different risk classifications based on their operational priorities and risk tolerance. The system is calibrated for international business operations (corporate, professional, expatriate personnel) and applies the same standard of evidence in every country.

Per-Country, Per-Direction Trigger Selection

Triggers are split into two independent directions. LEAVE triggers measure conditions that argue for evacuation or restricted operations. ENTER triggers measure conditions that argue for re-entry or resumption. You can enable each trigger as LEAVE-only, ENTER-only, BOTH, or off, and the choice is made per country. A trigger tagged BOTH on a country is counted in both the LEAVE classification and the ENTER readiness scale for that country, in parallel.

A country's LEAVE risk is the percentage of its active LEAVE triggers that are currently breached. A country's re-entry readiness is the percentage of its active ENTER triggers that are currently met. Triggers you have not enabled for a country in a given direction are excluded from that direction's denominator. If you have no active LEAVE triggers for a country, its LEAVE posture is reported as N/A rather than defaulting to STABLE; the same applies to ENTER (no default to READY or GO).

BOTH-tag scoring: a single trigger tagged BOTH on a country counts once in that country's LEAVE denominator and once in its ENTER denominator, and its breach status contributes to each direction independently - there is no double-weighting and no offset between the two scales.

Posture Model

Each monitored country sits in one of four postures at any time: Operating, Reduced, Suspended or Watching. The posture is set per country by you - it never changes automatically - and every change is audit-logged with who made it and when. For Operating and Reduced countries the LEAVE classification table below is the headline reading, with ENTER readiness reported in parallel for forward planning; for Suspended countries the ENTER readiness table is the headline and the LEAVE classification continues to run as a guard against fresh disruption; Watching countries are informational only and produce no recommendations. Posture does not change which triggers are evaluated - both directions are always assessed - only which classification table is treated as the headline reading for that country.

LEAVE Risk Classification

Percent of active LEAVE triggers breached, evaluated per country.

Level % of Active LEAVE Breached Recommendation
EXTREME ≥70% Evacuate
HIGH 40–70% Consider Evacuation
ELEVATED 20–40% Prepare for Activation
STABLE <20% Routine Monitoring

Re-Entry Readiness Classification

Percent of active ENTER triggers met, evaluated per country.

Level % of Active ENTER Met Recommendation
GO ≥75% Resume Operations
READY 50–75% Prepare Re-Entry
WATCH 25–50% Monitor Closely
NOT READY <25% Hold Position

What CHARIS Records

The alignment claim rests on records, not prose. These are the append-only trails the platform actually keeps:

  • Posture history. Append-only record of every country posture change - previous and new posture, who changed it, an optional note, and a timestamp. Rows are never edited or deleted.
  • Configuration audit log. Append-only log of configuration changes (per-country trigger selections, re-entry distribution list) with the acting user and a timestamp.
  • Alert dispatch log. Append-only log of every state-change alert dispatched - country, direction, previous and new band, and send time.
  • Email send ledger. One ledger row per assessment-email send per user per cycle, keyed to prevent duplicate sends and to show exactly what was emailed and when.
  • Fact provenance trail. Every country-fact value transition is logged - old value, new value, source, source URL, and whether it was an AI update or an analyst override with a reason.
  • Trigger catalogue audit log. Admin changes to trigger definitions (thresholds, wording, activation) are logged field-by-field with the acting admin and a reason.

Data Sources

CHARIS assessments draw on source feeds curated by Sicuro Group: government advisories, state news agencies, defence and security, interior and civil defence, airspace status, and humanitarian and international sources, monitored across every country CHARIS covers.

Assessments are indicative only and should be verified against live operational conditions before making decisions. Conditions may have changed since your last assessment was generated.

Operational Notes

Assessment Schedule: assessments run automatically at 02:00 UTC daily. Configuration Changes: changes to your country selections or trigger templates are saved immediately but take effect from the next scheduled assessment cycle. Initial Baseline: when you first configure your monitoring profile, an initial baseline assessment is generated automatically.

Legal Disclaimer

Assessments generated by CHARIS are indicative only and are provided for informational purposes as one input to organisational decision-making. They do not constitute professional security advice, legal counsel, or an instruction to act. Users must verify all information independently and consult qualified professionals before making operational decisions. Sicuro Group LLC accepts no liability for any loss, damage, or consequence arising from reliance on CHARIS assessments. Use of this platform constitutes acceptance of these terms.