SCS adopts a risk-based methodology to all projects and draws heavily from its extensive experience in the application of BS 7799 and development of CRAMM.