News and updates to CRAMM
News about planned updates and future developments to CRAMM is listed below. If you'd like further information, please contact the CRAMM Sales Desk using the contact methods listed in the sidebar.
Please note, all NATO and EU releases must be authorised in advance by the NATO Office of Security. The European Union (EU) CRAMM versions do not include options to install the "Introduction to NATO Profile" and "NATO Roadmap".
The standard CRAMM Expert and CRAMM Express versions are available worldwide with the exception of a small number of countries where export restrictions apply. In addition to the English version, Dutch and Czech versions are available from our resellers in Holland and Czech Republic.
CRAMM NATO version 5.4 (released 2009)
To meet customer demands for an import capability in CRAMM, version 5.4 included a new functionality to enable users to export the status of countermeasures to owners and, following updates, to automatically import the changes into the CRAMM database - without users having to make the changes manually. This new functionality was also be incorporated into the CRAMM EU version.
Other features introduced in the NATO V5.4 version include:
- Installation of version 1.8 of the NATO Roadmap (NATO versions only).
- Updated countermeasure statements to clearly identify which countermeasures are related to minimum standards and are therefore mandatory.
- Updated online user help guide.
- Updated user guide document.
- New functionality to address the ability to export and import countermeasure status information from CRAMM Expert and CRAMM Express.
The NATO Roadmap was updated to Version 1.8 allowing NATO users to access the latest NATO policy framework. This policy framework is only available to approved NATO users.
CRAMM NATO version 5.5 (released 2010 with later fix issued as v5.5.7 in 2011)
The latest features in NATO (CRAMM) V5.5 include:
- Windows 7 combatibility.
- New SQL engine to enhance performance and address multi-threading on Windows multi-core PCs.
- Sentinel USB driver update.
- Bug fixes to resolve adding of NATO software asset classes to models.
- Updated on-line user help guide.
- Updated user guide document.
- New functionality to address the production of a new risk management report wizard.
- GUI references to BS7799 changed to ISO 27001.
- Adobe reader distribution update to address security issues.
The NATO Roadmap has been updated allowing NATO users to access the latest NATO policy framework. This policy framework is only available to approved NATO users.
Countermeasure statements at Levels 1 and 2 remain as they were in CRAMM v5.4. It will not be necessary to run the CRAMM Review conversion utility. This is provided to allow users to migrate reviews from V5.2. In any case, countermeasures will need to be recalculated for reviews produced in V5.2 or earlier.
A fix in the NATO version 5.5 versions was released in Feb 2011 as NATO CRAMM v5.5.7. This was to address the rerunning of calculations in CRAMM Expert reviews affecting imported reviews only.
CRAMM NATO version 5.6 (due to release summer 2011)
The planned features in NATO (CRAMM) V5.6 include:
- Updates to asset groups.
- Updates to countermeasure library.
- Updated on-line user help guide.
- Updated user guide document.
- Format changes to .hlp user guide to .chm or .html
- Bug fixes to ISO 27001 risk treatment reports.
- Install the latest version of the NATO Roadmap on NATO versions only.
- Adobe reader distribution update to address security issues.
CRAMM version 5.2 released
Standard CRAMM Expert and Express modules on CRAMM v 5.2 have been released in various versions. Version 5.5.5 is available for download to licensed users. Unless otherwise stated, key changes to the CRAMM Expert and CRAMM Express versions include:
- Windows 7 compatibility
- SQL engine update in CRAMM Expert to address multi-threading on Windows multi-core PCs
- Sentinel USB driver updates
- Updated asset types in CRAMM Expert
- Updated countermeasure statements in CRAMM Expert and CRAMM Express.
- Updates to ISO 27001 statements to replace BS 7799 references in CRAMM Expert and Express
- Updated on-line user help guide.
- Updated user guide.
- User guide also provided in .chm version
- Improvements to Risk Treatment Planning and Security Improvement Planning options in CRAMM Expert.
- Fix to allow opening of User Guide in later Windows operating systems
- New functionality to address the ability to export and import countermeasure status information.
- Ability to import or create user maintained Security Improvement Actions.
- Adobe reader distribution update to address security issues.
Only the CRAMM Standard Expert and Express versions are available for secure download. Please follow the link on the homepage if you wish to obtain a trial version of the CRAMM Expert or CRAMM Express versions. We recommend using a 30-day CRAMM Expert license key to trial both Expert and Express versions.
CRAMM Expert and Express (other work in progress in 2011)
Planned improvements on Standard CRAMM Expert and Express modules during 2011 are likely to include:
- SQL engine update.
- Sentinel driver updates
- Updated countermeasure statements.
- Updated on-line user help guide.
- Updated user guide.
- Fix to allow opening of User Guide in later Windows operating systems
- Fixes to ISO 27001 risk treatment reports.
- Adobe reader distribution update to address security issues.
The latest release of Standard CRAMM Expert and Express v5.5.5 modules on CRAMM v 5.2 addresses a bug in the rerunning of calculations in CRAMM Expert reviews that affects imported reviews only
More information
If you need further information about CRAMM - or the updates described on this page - please contact the CRAMM Sales Desk on
+44 (0)1908 817151
or by email using the link below.


