In Part 2, we’re covering Chapter 4 (on FAIR terminology) and Chapter 5 (on measurement), two key categories for both understanding the FAIR approach and generally clearing up the rampant confusion surrounding risk analysis. Can you define a “loss event” and describe how it would unfold at your organization? Discuss.
Also, we’re hosting a discussion board in LINK, the FAIR Institute’s community site, to contribute discussions points to the community or pose questions – FAIR experts and community members will answer. (A FAIR Institute membership and signup for LINK is required to access the discussions. Turn your notifications on in your LINK profile settings to make sure that you receive updates to the discussions.) Visit the FAIR book discussion board.
With thanks to author Rebecca Merritt, Senior Manager, Professional Services at RiskLens, the technical adviser to the FAIR Institute.
Using the Factor Analysis of Information Risk (FAIR) methodology developed over ten years and adopted by organizations worldwide, Measuring and Managing Information Risk provides a proven and credible framework for understanding, measuring, and analyzing information risk of
Related: What Is FAIR?