As enterprises accelerated their adoption of complex, cloud-native architectures, they encountered a new order of complexity. Infrastructure dissolved into services, workloads became ephemeral, and security boundaries blurred. Wiz emerged as a transformational force in cloud technical security, offering radical visibility and risk prioritization across multi-cloud ecosystems.
At the same time, a broader and more consequential challenge emerged, one that extends well beyond isolated technical misconfigurations or discrete vulnerabilities.
Modern organizations function as dynamic, highly interconnected digital ecosystems shaped by siloed frameworks, technologies, applications, processes, data flows, and human actors, all operating in continuous interaction.
Within this complexity, risks and outcomes do not reside within individual components alone; they emerge at the boundaries where systems, processes, and dependencies interact.
The DVMS Institute is redefining how enterprises govern and assure digital value outcomes as an integrated dimension of digital business performance, resilience, and accountability.
At its core, the DVMS overlay is a simple but powerful integration of governance intent, operational capabilities, assured evidence, and cultural learning powered by the models below.
Create, Protect, and Deliver (CPD) – This systems-based model within the DVMS links strategy to risk and governance to execution, thereby setting up the creation, protection, and delivery of digital value as an integrated, continuously adaptive organizational capability.
Minimum Viable Capabilities (MVC) – This model supports the seven essential, system-level organizational capabilities of Govern, Assure, Plan, Design, Change, Execute, and Innovate to reliably create, protect, and deliver digital value at organizational boundaries, aligned with strategy-risk intent.
3D Knowledge (3DK) – This model supports a systems-thinking approach to cross-team knowledge and collaboration, aligned with strategic intent, to ensure organizational behavior, learning, and execution remain integrated and adaptive in creating, protecting, and delivering digital value.
Question Outcome / Question Metric (QO/QM) – The QO/QM approach supports governance as testable intent by defining a clear Question Outcome (QO), with one or more Question Metrics (QM) that provide observable, decision-relevant evidence that the system can actually deliver the intended outcomes in the organizational living digital system
A Governance Overlay that replaces fragmentation with unity. The DVMS provides organizations with a structured way to connect strategy with day-to-day execution. Leaders gain a consistent mechanism to direct, measure, and validate performance across every system responsible for digital value.
A Behavioral Engine that drives high-trust, high-velocity decision-making. The DVMS embeds decision models and behavioral patterns that help teams think clearly and act confidently, even in uncertain situations. It is engineered to reduce friction, prevent blame-based cultures, and strengthen organizational reliability.
A Learning System that makes culture measurable, adaptable, and scalable. Culture becomes a managed asset rather than an abstract concept. The DVMS provides a repeatable way to observe behavior, collect evidence, learn from outcomes, and evolve faster than threats, disruptions, or market shifts.
Instead of replacing existing operational frameworks and platforms, the DVMS elevates them, connecting and contextualizing their data into actionable intelligence that enables organizations to:
For the CEO, the DVMS provides a clear line of sight between digital operations, business performance, and strategic outcomes, turning governance and resilience into enablers of growth and innovation rather than cost centers.
For the Board of Directors, the DVMS provides ongoing assurance that the organization’s digital assets, operations, and ecosystem are governed, protected, and resilient, supported by evidence-based reporting that directly links operational integrity to enterprise value and stakeholder trust.
For the CIO, CRO, CISO, and Auditors, the DVMS provides a unified approach to organizational digital value management, operational resilience, and regulatory compliance.
The DVMS Institute’s accredited and certified training programs equip enterprises with the skills to build an adaptive governance system that facilitates resilient, assured, and accountable digital value outcomes.
Through structured learning, applied certification, and authoritative publications, the Institute teaches a disciplined, outcome-driven approach to managing resilience as an integrated dimension of digital business performance, resilience, and accountability.
DVMS Cyber Resilience Awareness Training
The DVMS Cyber Resilience Awareness non-certification course and its accompanying body of knowledge publication educate all employees on the fundamentals of digital business, its associated risks, the NIST Cybersecurity Framework, and their role within a shared model of governance, resilience, assurance, and accountability for resilience in complex digital ecosystems.
DVMS NISTCSF Cyber Resilience Foundation Certification Training
The DVMS NISTCSF Cyber Resilience Foundation certification training course and its accompanying body of knowledge publications provide ITSM, GRC, Cybersecurity, and Business professionals with a detailed understanding of the NIST Cybersecurity Framework and its role in a shared model of governance, resilience, assurance, and accountability for achieving resilience in complex digital ecosystems.
DVMS Cyber Resilience Practitioner Certification Training
The DVMS Practitioner certification training course and its accompanying body of knowledge publications teach ITSM, GRC, Cybersecurity, and Business practitioners how to build a unified governance, resilience, assurance, and accountability system designed to operationalize resilience in complex digital ecosystems.
The DVMS FastTrack is a phased, iterative approach that helps organizations mature a DVMS program over time, rather than trying to do everything simultaneously. This approach breaks the DVMS journey into manageable phases of success.
It all starts with selecting the first digital service you want to operationalize with the new DVMS capabilities. That service will then serve as the blueprint for operationalizing DVMS across the remaining services.
Guidehouse Security, Dr. Joseph Baugh shares his story on how his DVMS certification training enabled him to help a large energy company become compliant with TSA’s Directive for Pipeline Security
The whitepapers below present a clear progression from compliance-driven thinking to a modern system of Governance, Resilience, Assurance, and Accountability (GRAA). Together, they define an evidence-based approach to building and governing resilient digital enterprises.
The Assurance Mandate Paper explains why traditional compliance artifacts offer reassurance, not proof, and challenges boards to demand evidence that value can be created, protected, and delivered under stress.
The Assurance in Action Paper shows how DVMS turns intent into execution by translating outcomes into Minimum Viable Capabilities, aligning frameworks through the Create–Protect–Deliver model, and producing measurable assurance evidence of real performance.
The Governing by Assurance Paper extends this model to policy and regulation, positioning DVMS as a learning overlay that links governance intent, operational capability, and auditable evidence—enabling outcome-based governance and proof of resilience through measurable performance data.
DVMS Institute Chief Content Architect David Moskowitz, shares his insights on how the DVMS seamlessly aligns organizational strategy, governance, operations, and culture into an integrated overlay system that ensures digital value outcomes.
Rick Lemieux, the DVMS Institute’s Chief Product Officer, shares his insights on how the NIST Cybersecurity Framework (NISTCSF) integrates with the DVMS to drive resilient digital business operations across a complex digital supply chain.
The DVMS Institutes programs have been adopted by governments and businesses across the globe
100+ Years of Experience
