CCMM does not replace your existing platforms. It sits above them, ingesting evidence from your current systems and returning a single, court-defensible convergence score without exposing any proprietary methodology to your environment.
No data leaves your environmentAPI and secure feed integrationCourt-admissible output formattingAnnual SLA and recalibrationIRAP assessment ready
Regulatory and compliance frameworks supported
ISM
Information Security Manual · All government entities and contractors
International frameworks · Multinational and enterprise environments
Supported data classification levels:
OFFICIALOFFICIAL: SensitivePROTECTEDSECRETTOP SECRETPIIPCI-DSS Cardholder DataPHI / My Health Record
CCMM integration scope and output classification are calibrated to the data classification level of the environment. A PROTECTED environment receives a different integration architecture from an OFFICIAL environment. Classification scoping is confirmed during the scoping consultation.
Calibrated P(E|H) values, evidence stream weights, threshold bands, and corroboration multipliers are processed server-side only. Your integration receives scores, not the scoring logic. IRAP assessors can verify this separation.
📋
Audit trail on every output
Every CCMM score is accompanied by a documented analytical record showing which evidence streams were active, at what tier, and what the convergence basis was. Court-defensible and APRA audit-ready by design.
🔄
Annual recalibration included
CCMM calibration values are updated annually based on case outcome data and new precedent. Active integration clients receive recalibrated weights automatically under the SLA. ISM and Essential Eight mapping updated at each release.
Ready to scope your integration?
Each engagement is configured to your environment and classification level. Law enforcement, banking, healthcare, critical infrastructure, and government each require different integration architectures. A scoping consultation is the first step.
