The Summer Book Club launched in 2020--but with so many more FAIR followers added to the membership rolls of the FAIR Institute since then, it’s going to be new to many of you.
We think tackling the FAIR book makes a perfect summer team project – it’s filled with fresh and accessible concepts that challenge assumptions about information and technology risk, as well as practical guidance your team can apply to improve the efficiency and effectiveness of your security or risk operation. Even if you’ve read the book before, this is an opportunity to get your team on the same page going forward.
COMING SOON: Book Clubbers, show us your FAIR knowledge and we’ll award you prizes. Watch this blog for details!
Also, we’re hosting a discussion board in LINK, FAIR Institute’s community site, for further discussion or posting of questions – FAIR experts and community members will answer. (A FAIR Institute membership and signup for LINK is required to access the discussions. Turn your notifications on in your LINK profile settings to make sure that you receive updates to the discussions.) Visit the FAIR book discussion board - here
What do you need to do to get started?
Further your FAIR education: Take a FAIR training course through the FAIR Institute.
With thanks to author Rebecca Merritt, Senior Manager, Professional Services at RiskLens, the technical adviser to the FAIR Institute.
Using the Factor Analysis of Information Risk (FAIR) methodology developed over ten years and adopted by organizations worldwide, Measuring and Managing Information Risk provides a proven and credible framework for understanding, measuring, and analyzing information risk of any size or complexity. Intended for organizations that need to either build a risk management program from the ground up or strengthen an existing one, this book provides a unique and fresh perspective on how to do a basic quantitative risk analysis. Covering such key areas as risk theory, risk calculation, scenario modeling, and communicating risk within the organization, Measuring and Managing Information Risk helps managers make better business decisions by understanding their organizational risk.
Related: What Is FAIR?