Member Login
About
Chairman’s Welcome
Mission
Leadership
Members
Awards
Blog
Newsroom
Get Involved
Learn FAIR
What is FAIR?
FAIR Risk Management
FAIR Book
FAIR FAQ
FAIR Institute Blog
FAIR Training and Certification
FAIR-U Tool
FAIR University Curriculum
FAIR Institute Member Resources
FAIR Training
Events
FAIR Seminars
Workgroups
Local Chapters
Partners
Technical Advisor
Sponsors
Education Partners
Become a Sponsor
Contact Us
Blog
FAIR Institute Blog
Posts by Topic
FAIR
(373)
Risk Management
(280)
Events
(61)
FAIR Conference 2020
(36)
Fair Institute
(36)
FAIR Conference 2018
(34)
FAIR Conference 2019
(33)
Meet a Member
(33)
Jack Jones
(26)
Fair Conference 2017
(20)
Case Studies
(12)
FAIR Summer Book Club 2020
(6)
FAIR University
(6)
White Paper
(5)
FAIR Training
(4)
FAIR risk model
(3)
Government
(3)
Infographic
(1)
Podcast
(1)
Recognition for FAIR
(1)
see all
This is a test summary for a blog post
CFO.com: FAIR Is “What Good Looks Like in Cybersecurity”
5 Steps to Improve Your Quantitative Risk Management Program in 2021
FAIR Beginner's Guide: What Do the Numbers Mean?
Common Sense: The Underrated Skill in FAIR Analysis
New ISACA White Paper Advises CISOs to Report Cyber Risk to the Board with FAIR
2021 Is the Year of Operationalizing Cyber Risk Quantification
Interview: Jack Jones Talks Lessons of 2020 – and New Research on Controls-to-Risk Mapping, Coming in 2021
FAIR Institute Top 12 Blog Posts of 2020
Video: How Netflix Rethinks Cyber Risk Analysis with FAIR (FAIRCON2020)
Be Prepared for 2021 – Start FAIR Risk Quantification Training Today with Our Best Prices of the Year
Enhancing HIPAA Risk Assessment with FAIR at Cambia Heath (FAIRCON2020 Video)
Video: How to Rapidly Triage Issues with FAIR to Focus on What Matters Most (FAIRCON2020)
Sponsored Webinar: New Capabilities from RiskLens Make FAIR Analysis Faster and Easier
FAIRCON2020 Video: Implementing FAIR Risk Management at DoorDash at ‘1,000 Miles a Minute’
How to Factor Worst-Case Cyber Events into Risk Analysis - Jack Freund on the Cyentia "Xtreme" Report
Video: FAIR Risk Analysis for Daily Decision Support at Major Healthcare and Retail Organizations (FAIRCON2020)
3 Steps to Combine MITRE ATT&CK and FAIR to Focus Cyber Risk Management
Considering FAIR? We Provide Executive Briefings Tailored for Your Organization
Harvard Survey Finds FAIR Top Cyber Risk Quantification Choice
How to Win Buy-in for a FAIR Quantitative Risk Management Program
Gartner’s Khushbu Pratap on the Drivers for Cyber Risk Management and Digital Transformation (FAIRCON2020 Video)
FAIRCON2020 Video: How Cimpress Prioritizes NIST CSF Activities with FAIR and the MITRE ATT&CK Framework
FAIRCON2020 Video: How Highmark Health Combines FAIR and HITRUST for Better Cyber Risk Management
FAIR Institute Reaches 10,000 Members in Less than 5 Years
FAIRCON2020 Video: DOE and NASA on Building A Quantitative Risk Management Program in the Federal Government
12 Bits of Advice from FAIR Veterans to New FAIR Evangelists
Video: Douglas Hubbard on Optimizing Your Risk Analysis Team (FAIRCON2020)
FAIRCON2020 Panel: How FAIR Can Help Better Integrate Cyber Risk with ERM (Video)
FAIRCON2020 Video: Deputy Comptroller Kevin Greenfield on What the OCC Expects from Banks in Cybersecurity Risk Management and Reporting
Pro Tips for Presenting Results of a FAIR Analysis
What CISOs Should Tell Boards about Cyber Risk – 5 Insights from FAIRCON2020 (Video)
We Agree with Phil Venables that “Cybersecurity Budget Benchmarks Are a Waste of Time” – Better to Focus on Outcomes
5 Tips from CISOs on Making the Move to Quantitative Cyber Risk Management (FAIRCON2020 Video)
FAQ’s about Cyber Risk Disclosure Answered by SEC Cyber Enforcement Chief Kristina Littman at FAIRCON2020 (Video)
How to Find Data for Every One of the FAIR Factors – Wade Baker’s Talk at 2020 FAIR Conference (Video)
FAIR Institute Announces 2020 Winners of Annual Excellence Awards at FAIR Conference
FAIR Institute and HITRUST Plan Integration of FAIR Standard and HITRUST CSF
FAIRCON2020 Day Two: Gray Rhinos, “FrankenSMEs”, Gartner Forecasts and Advice from FAIR Experts at DOE and E*TRADE Close Out the Cyber Risk Quantification Event of the Year
FAIRCON2020 Day Two Keynote Conversation: Jack Jones and ‘Gray Rhino’ Author Michele Wucker on How to Help the Business Make the Right Decisions on Risks They Struggle to See
FAIRCON2020 Day One: From Reporting to the Board to Triaging Risks - Tips and Insights from Goldman Sachs, Netflix, the SEC, Cigna and More Pioneers of Cyber Risk Quantification
FAIRCON2020 Keynote Discussion: 6 Pieces of Wisdom from Jack Jones and Phil Venables on What Makes for Better Quantitative Cyber Risk Management
FAIRCON2020 Preview: Defending the US in Cyberspace, with Rep. Mike Gallagher and Chris Inglis, Solarium Commission
Hear from C-Level Security Executives and Officials at the 2020 FAIR Conference on Quantitative Cyber Risk Management
Attend FAIRCON2020 to Meet Expert Partners to Help You Operationalize FAIR at Your Organization
FAIRCON2020 Preview: Real-Life Examples of Reporting to the Board with FIS Global and Protiviti
Meet a FAIRCON2020 Speaker: Cody Scott of NASA on Building A Quantitative Risk Management Program in the Federal Government
FAIRCON2020 Preview: Prioritizing NIST CSF Activities with FAIR - Richard Barretto, Cimpress
Meet a FAIRCON2020 Speaker: Shelley Leibowitz (Director, E*TRADE, MassMutual) on Helping the Board with Cyber Risk Oversight
Thanks for Recommending Cyber Risk Quantification, Wall St. Journal. Now Let Us Introduce You to FAIR
FAIRCON2020 Preview: How to Become a Business-Centric CISO – Omar Khawaja, Highmark Health
FAIR Institute Orientation Webinar: Start Your Journey to Quantitative Cyber Risk Management Here
Meet the Members Podcast: Michael Kromm and Michael Meis, Launching the Kansas City FAIR Institute Chapter
FAIRCON2020 Preview: BCP Bank’s Harold Marcenaro on Supporting Digital Transformation with Quantitative Risk Management
Meet a FAIRCON2020 Speaker: Wade Baker Leads a Presentation on Better Data for Better Decisions
Sponsored Webinar: RiskLens Introduces Rapid Risk Assessment Capability
FAIR Institute Summer Book Club Final Meeting - All 6 Chapter Guides to the FAIR Book Are Right Here
How FAIR Helped Me Rethink 3 IT Audit Questions
A FAIR Beginner’s Guide to FAIRCON2020
Write for the FAIR Institute Blog! Call for Blog Post Submissions
Are You a "Play It Safe" or "Get It Right" Risk Analyst? Take the Test, Learn Your Habits
Using FAIR to Understand Change in Resilience Risk – Guide and Webinar from Protiviti
FAIR Institute Summer Book Club Part 5 – Reading the FAIR Book Together – This Week: Controls and Common Mistakes
How to Set Goals for a Cyber Risk Management Program and Integrate with ERM – Tips from the DOE
NISTIR 8286 Second Draft: Strong Focus on Risk Quantification for Aligning Cyber and Enterprise Risk Management
Tony Martin-Vegue’s Recipe for Passing the OpenFAIR Exam
5 Key Ways FAIR Changes Cybersecurity Paradigms
Watch the Webinar: How Financial Risk Quantification Can Help Federal Agencies Better Integrate Cybersecurity Risk and ERM
FAIR Institute Summer Book Club Part 4 – Reading the FAIR Book Together – This Week: A Walk through a Sample Risk Analysis
2020 FAIR Conference Agenda: Speakers from E*TRADE, Netflix, Energy Dept, ‘Gray Rhino’ Author and Many More, Oct. 6-7
ISACA’s New Risk IT Framework “More Closely Aligned with FAIR,” Jack Jones Finds
Honoring Excellence in Information and Operational Risk Management: Submit Your Nominations for the 2020 FAIR Awards!
ISSA Forms Strategic Alliance with FAIR Institute, Expanding Educational Resources to the Cyber and IT Community
AFERM and FAIR Inst. Webinar: How Federal Agencies Achieve Risk-Based Cybersecurity
FAIR Institute Summer Book Club Part 3 – Reading the FAIR Book Together - This Week: Analysis Process and Results
Key Terms in Cyber Risk Analysis – Test Your Knowledge
Starting Off on the Right Foot: How to Clearly Define a Risk Scenario Statement for FAIR Analysis
Why Rationale Is Crucial in Cyber Risk Quantification
Microsoft Promotes FAIR™ Analysis for Cloud Security Risk
FAIR Institute Announces New Membership Tiers
NACD Cyber Risk Oversight Handbook Endorses Quantification, Cites FAIR - with Help from FAIR Inst. Members Nick Corzine and Ben Havelka of Centene
FAIR Institute Summer Book Club Part 2 – Reading the FAIR Book Together
FAIR Institute Partners with RiskLens to Provide Free FAIR Training to Historically Black Colleges and Universities
NASA’s Risk Management Handbook Shares the Spirit of FAIR™ and Quantitative Risk Analysis
You DO Have Enough Data for a Quantitative Risk Analysis
The 2020 FAIR Conference Is Going Virtual. Submit Your Presentation Today to Speak at FAIRCON2020!
Introducing the FAIR Institute Summer Book Club – Let’s Read & Discuss the FAIR Book Together
Five Questions the Board Should Ask the CISO
Primary vs. Secondary Loss in FAIR™ Analysis: What's the Difference and Why It Matters
How FAIR™ Can Help the US Federal Government Better Prioritize and Right-Size Its Cybersecurity Investments
ISACA Journal Case Study: ‘Building a Rock-Solid ERM Culture on FAIR™’
Webinar: Jack Jones on Changing Executive Priorities and Investments in Security with Risk Quantification
In Hard Times, Remember the 3 F’s of Quantified Cyber Risk Analysis
Sponsored Post: RiskLens Announces New Solutions to Keep Risk Under Control with Lower Security Budgets, Greater Challenges from COVID-19
Webinar: Jack Jones on Lessons for Cyber Risk from Military ‘Situational Awareness’
NIST's Advice: Integrate Cyber Risk with Enterprise Risk Using FAIR™
Why NIST 800-300 and CVSS Are Not Enough for Effective Risk Management - Jack Freund
Drawing FAIR™ Conclusions from Cyentia’s Information Risk Insights Study (IRIS)
Free FAIR™ Fundamentals Training for University Students and Professors
FAIR™ Institute Local Chapters Moving to Virtual Events to Continue Education on Cyber Risk Quantification
Watch These Videos of FAIR™ Experts from RSA Conference 2020
Amazon S3 Bucket Data Breaches – a FAIR™ Risk Analysis
FAIR™ Analysis Case Study Webinar: Decrease Risk from Employees Working at Home
Cyberspace Solarium Commission Proposes Amending Sarbanes-Oxley to Include Cybersecurity
Time to Review Your Insurance Protection with a FAIR™ Approach, Says Chip Block
Video: Jack Jones and ‘Gray Rhino’ Author Michele Wucker Talk Why We Don’t See Risks Coming
Vote Today: FAIR™ Nominated as “Cyber Risk Model of the Year” in the Advisen Cyber Risk Awards for Second Year in a Row
From a FAIR™ Institute Perspective, COVID-19 Isn’t a Black Swan. It’s a Gray Rhino
Meet a Member Podcast: Michael Kenney, Freddie Mac, Starting with FAIR™ from the Operational Risk Side
Jack Jones on How the COVID-19 Pandemic Is Likely to Affect Cybersecurity Programs
Poll: FAIR™ Institute Members Say Work from Home Will Be Top Risk Category in Business Continuity Planning
Video: How FAIR™ Cyber Risk Analysis Showed the Way to 3 Risk Reduction Wins for Fannie Mae
Podcast: Jack Freund on the Role for FAIR™ Risk Analysts in Business Continuity Planning for Coronavirus
Video: How Ascena Retail Transferred Millions in Risk to 3rd Party Vendors, and More Wins from Its FAIR™ Program
3 Key Values of FAIR™ Risk Analysis (and 3 Reasons Your Organization Should Use It)
You Attended the FAIR™ Seminar at RSA Conference 2020 – Here Are Next Steps to Start Your FAIR Program
Meet the Members Podcast: Paris Chapter Leaders Tom Callaghan and Christophe Foret, Co-Founders of C-Risk
Submit Your Presentation Today to Speak at FAIRCON20!
RSAC 2020 Report – Big Turnout for 2 FAIR Seminars, Breakfast Advice on Starting a FAIR™ Program from Jack Jones and Fannie Mae, Ascena Retail CISOs
Calibrated Estimation for FAIR™ Cyber Risk Quantitative Analysis - Explained in 3 to 4 Minutes
FAIR Institute Announces New Partnership with Cisco Systems, Inc.
Meet a Member Podcast: Alex Rogozhin, Building a FAIR™ Program Bottom Up at Truist
See You at RSA Conference 2020 with Many FAIR™ Events on the Agenda
Shopping for Cyber Loss Data
Meet the Members Podcast: Nathan Thomack and Nick Corzine, Launching the St. Louis FAIR™ Institute Chapter
'Why Is the Healthcare Industry Still So Bad at Cybersecurity?' Let's Start with Risk
Webinar on Demand: How Fannie Mae Integrates FAIR™ Cyber Risk Analysis and Threat Intel
4 Rules for a Successful Quantitative Cyber Risk Analysis
Meet a Member Podcast: Chris Golden, Director of Information Security at Horizon Blue Cross Blue Shield of New Jersey
Tips to Prepare for the Open FAIR™ Certification Exam
Cyber Risk Management Maturity Benchmark Survey Results Show Where There’s Room to Improve
NY Fed’s Dire Warning on Cyber Shock to the Banking System – Jack Jones’ FAIR™ Response
Frequently Asked Questions about FAIR™ Training
RSAC20 Seminar: A FAIR™ Approach to Cyber and Technology Risk Measurement
How to Combine NIST CSF and FAIR™ to Drive Better Cyber Risk Decisions – Watch this Webinar on Demand
COSO ERM’s Cyber Risk Guidance Recommends FAIR™ – Interview with ERM Authority James Lam
FAIR™ Fundamentals Training Course Is a Must-Do in 2020
Jack Jones’ 2019 Insights on Building a Cyber Risk Management Program – and Outrunning the Bear
Jack Freund’s Radical Proposal: Admit You Probably Will Get Breached
Geoji Paul of Centene and Nathan Thomack of Emerson on What to Expect in Your FAIR™ Journey
NIST CSF Adds FAIR™, Videos from FAIR Conference 2019, and More Top 5 Topics of Our Blog in 2019
Win Converts to FAIR™. Quote Jack Freund’s Manifesto in the ISACA Newsletter
2019 FAIR Institute Growth Leads to the Launch of Three New Local Chapters
FAIRCON19 Video: Integrating Cyber Risk into ERM with Experts from BlackRock, DTCC, Freddie Mac
Unprecedented Presence for FAIR™ and Cyber Risk Quantification Coming at RSA Conference 2020
FAIRCON19 Video: Managing Third-party Cyber Risk with RiskRecon, Horizon Blue Cross, and Cyentia Institute
(Video) Meet a Member: Robert Immella, Senior Information Security Risk Analyst, KeyBank
FAIRCON 19 Video: How MassMutual Closes the Risk Management Loop with FAIR™
3 Lessons We Learned from Our Introduction of FAIR™ at Swisscom
Save The Date and Secure Your Budget for the 2020 FAIR Conference!
Listen to the Webinar: 3 Steps to FAIR™ Program Success at Highmark Health
Register for the 2019 Risk Management Maturity Benchmark Survey Results Webinar
FAIRCON19 Video: Use Case Panorama – FAIR™ Practitioner Success Stories from BB&T, Swisscom, Fidelity Investments and Daimler Mobility
(Video) Meet a Member: Brandon Myers, Risk Management and Corporate Security Architect, Mastercard
NIST Maps FAIR to the CSF - Big Step Forward in Acceptance of Cyber Risk Quantification
FAIRCON19 Video: Tips on Building a Cybersecurity Program with a Risk Management Framework & FAIR
FAIRCON19 Video: CISOs from Fannie Mae, Highmark Health, Department of Energy, and Premise Health Talk FAIR Cyber Risk Quantification
(Video) Meet a Member: Daniel Davis, Security Analyst at Lyft
Second Thoughts on Secondary Loss in FAIR. What Are Your Thoughts?
Federal Reserve Cyber Risk Workshop to Discuss FAIR in Charlotte, NC, Nov. 20, with Jack Jones on Panel
(Video) Meet a Member: Peter Higgins, Director, InfoSec Risk Management, Tyler Technologies
Watch the FAIRCON19 Video: Doug Hubbard on Overcoming the Myths of Cyber Risk Measurement
(Video) Meet a Member: Keith Weinbaum, Enterprise Risk Management Architect, Quicken Loans
Gartner’s John Wheeler: Many Organizations Using IRM and FAIR to Achieve ‘Techquilibrium’
Watch the Video from FAIRCON19: Perfecting a CISO Board Presentation with James Lam and Chris Inglis
Health IT Security Interviews Highmark Health’s Omar Khawaja on How FAIR Drives Security Processes
Watch the Video: Jack Jones FAIRCON19 Keynote “Risk Management Programs that Actually Work”
Watch the Video: Congressional Cybersecurity Leader Jim Langevin to FAIRCON19: “You Are Moving the Country to a Better Place”
(Video) Meet a Member: Annie Lavoie, Director, IT Risk Management, BDC
FAIRCON19 Media Coverage Gets the Message Out about ‘Rethinking Risk Management’
FAIR Institute Announces 2019 Winners of Annual Excellence Awards at FAIR Conference
FAIR Conference 2019 Day 2: Advice on 3rd Party Risk, Pitching the Board, ERM, IRM and Messy Data from Doug Hubbard, Gartner and More
FAIRCON 2019 Day One: Tips on Starting and Evolving a Risk Management Program from B of A, DOE, Quicken Loans and More
Jack Jones FAIRCON19 Keynote: "Enabling Risk Management Programs that Actually Work"
Jack Jones Honored with SC Media Reboot Leadership Award
All-in-One Matrix: Regulatory Compliance Risk Assessment Overview - Updated with NIST CSF + FAIR
No Time to Talk Cyber Risk, Senior Executives Say
See You at the 2019 FAIR Conference Next Week (a Few Seats Still Available)
Creating a Cyber Risk Intelligence Framework with FAIR – Jack Freund in ISSA Journal
‘How to Measure Anything’ Quantification Expert Douglas Hubbard to Speak at 2019 FAIR Conference
FAIR Institute Briefs Congressional Staff at ‘Cyber Day on the Hill’
Three Reasons You Should Get FAIR Certified
Jack Freund in ISACA Blog: Stop Telling Yourself Risk Management Stories
Managing a Cyber Risk Program in an Ever-Evolving Threat Landscape
NIST CSF and FAIR Integration at Cimpress Called “Success Story” by NIST
FAIR Book Co-Author Jack Freund’s Advice on 3rd Party Risk in New ISACA White Paper
Participate in the 3rd Annual 2019 Risk Management Maturity Benchmark Survey
Congressional Cybersecurity Leader Rep. Jim Langevin to Speak at 2019 FAIR Conference
5 More People You’ll Meet at the 2019 FAIR Conference in September
FedScoop: “Increasingly, Federal Agencies Are Joining Industry” in Cyber Risk Quantification
Jack Jones: Quit Blaming Executives for Cybersecurity Problems
Why the FAIR Model…A 4-Point Primer on FAIR to Share with Your Organization
Aggregating Expert Opinion: Simple Averaging Method in Excel
Protiviti Joins FAIR Institute as Founding Sponsor in Advisory Services to Advance the Use of Risk Quantification
[Video] 4 Tips for Starting Your FAIR Program from Musso Shaikh of Fannie Mae
FAIR Institute Launches FAIR Enablement Program
Capital One Breach Shows Cybersecurity Is “Lost in Noise”, Jack Jones Tells New York Times
GAO Grades Federal Agencies ‘Fail' on Cyber Risk, Accelerating Movement to FAIR
3 Tips on How to Talk to SMEs about Cyber Risk Quantification
Targeting Cybersecurity Investment - a FAIR Approach
‘Healthcare Innovation’ Profiles Highmark FAIR Program: ‘Cybersecurity and Business Align’
All posts
Subscribe to Email Updates
Learn How FAIR Can Help You
Make Better Business Decisions
Order your copy now
Recent
Popular
Categories
Lists by Topic
FAIR
(373)
Risk Management
(280)
Events
(61)
FAIR Conference 2020
(36)
Fair Institute
(36)
FAIR Conference 2018
(34)
FAIR Conference 2019
(33)
Meet a Member
(33)
Jack Jones
(26)
Fair Conference 2017
(20)
Case Studies
(12)
FAIR Summer Book Club 2020
(6)
FAIR University
(6)
White Paper
(5)
FAIR Training
(4)
FAIR risk model
(3)
Government
(3)
Infographic
(1)
Podcast
(1)
Recognition for FAIR
(1)
see all
Posts by Topic
FAIR
(373)
Risk Management
(280)
Events
(61)
FAIR Conference 2020
(36)
Fair Institute
(36)
FAIR Conference 2018
(34)
FAIR Conference 2019
(33)
Meet a Member
(33)
Jack Jones
(26)
Fair Conference 2017
(20)
Case Studies
(12)
FAIR Summer Book Club 2020
(6)
FAIR University
(6)
White Paper
(5)
FAIR Training
(4)
FAIR risk model
(3)
Government
(3)
Infographic
(1)
Podcast
(1)
Recognition for FAIR
(1)
see all
Recent Posts