---
title: Jack Jones to Present Case Study on 'Quantifying Cloud Risk' at (ISC)² Security Summit
description: See Jack Jones on September 12th at (ISC)2 Security Congress 2016.
---

[The FAIR Institute Blog ](https://www.fairinstitute.org/blog)

# [Jack Jones to Present Case Study on 'Quantifying Cloud Risk' at (ISC)² Security Summit](https://www.fairinstitute.org/blog/jack-jones-to-present-case-study-on-quantifying-cloud-risk-at-isc-security-summit)

 Written by [James Finn](https://www.fairinstitute.org/blog/author/james-finn) | Aug 30, 2016 12:00:00 PM

[Jack Jones](https://www.fairinstitute.org/blog/who-is-the-author-of-fair), the author of the Factor Analysis of Information Risk ([FAIR](https://www.fairinstitute.org/)) standard and of the award-winning book "[Measuring and Managing Information Risk](https://www.fairinstitute.org/fair-book)," will be presenting a case study on "[Quantifying Cloud Risk](http://app.epicreg.com/sps_a/SessionSearch/sessionInfoByID2/d01a13a5-cc2d-4181-bd91-e17366abf35a/00000000-0000-0000-0000-000000000000/7a209e93-9a06-48bf-9db1-638014b55909)" at [(ISC)² Security Congress](http://congress.isc2.org/events/-isc-security-congress-2016/event-summary-993a0d888f31465eaf6cbcce7ac8c2e8.aspx) on Monday, September 12, 2016 at 3:15 pm. 

**[Register now to attend](https://www.tradeshowregistrar.com/regsystem_rs/?event=ISC2SC2016)**

Business executives are unlikely to ever really understand risk statements like “High risk”, “Medium risk” and “Low risk” when moving applications to the cloud. As a result, they sometimes discount higher risk situations as “InfoSec conservatism.” Risk quantification can be a powerful tool to help them better understand and appropriately prioritize InfoSec risk scenarios. Jack will walk participants through an analysis of a specific cloud service leveraging the Factor Analysis of Information Risk (FAIR) framework. The analysis results will be described in business terms that any executive would understand. This session will demonstrate a pragmatic approach to quantifying cloud-related risk.

Audience members will leave the session with the following:

- The power of communicating information security risk in business terms.
- Weaknesses associated with common 3rd party risk assessment methods.
- A pragmatic approach to quantifying information security risk.

**Are you interested in meeting Jack 1:1 during the event?**

Please make your appointment request via our [contact page](https://www.fairinstitute.org/contact-us).

See you there!

[View full post](https://www.fairinstitute.org/blog/jack-jones-to-present-case-study-on-quantifying-cloud-risk-at-isc-security-summit)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "James Finn"
  },
  "dateModified" : "2016-08-30T12:15:25.659Z",
  "datePublished" : "2016-08-30T12:00:00Z",
  "headline" : "Jack Jones to Present Case Study on 'Quantifying Cloud Risk' at (ISC)² Security Summit",
  "image" : {
    "@type" : "ImageObject",
    "height" : 2250,
    "url" : "http://cdn2.hubspot.net/hubfs/1616664/ISC2_Security_Congress_2016.jpg",
    "width" : 4000
  },
  "mainEntityOfPage" : "https://www.fairinstitute.org/blog/jack-jones-to-present-case-study-on-quantifying-cloud-risk-at-isc-security-summit",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "FAIR Institute Blog"
  }
}
```