Webinar: New SEC Disclosure Rules Will Boost Cyber Risk Quantification – But Force Changes across Your Organization Experts debate the new 4-day timeframe to report on incidents as well as the definition of “material risk.” Read More
AI, CRQ Buyer’s Guide, FAIR for 3 Lines of Defense Led Our Most Popular Blog Posts of First Half 2023 Our readers are forward thinkers leading their organizations into new frontiers of the cyber risk landscape with FAIR quantitative risk analysis. Read More
Jack Jones on the Problem with “Risk Scores”: Numbers without Quantification You aren't really measuring cyber risk if you are performing math on ordinal values assigned to vulnerabilities. Read More
FAIR Cyber Risk Analysis for AI Part 2: Increased Sophistication of Phishing Attempts The impact of generative AI on phishing and how to quantify the resulting risk metrics with cyber risk quantification. Read More
FAIR Cyber Risk Analysis for AI Part 1: Insider Threat and ChatGPT Explore real-world cyber risk scenarios involving the usage of LLMs and how to approach quantifying potential resulting loss metrics using Factor Analysis of Information Risk (FAIR). Read More
4 CISO Tips on Starting FAIR Cyber Risk Quantification at a Healthcare Organization How to introduce FAIR risk analysis and gain first victories in HIPAA compliance and more. Read More
5 More Red Flags when Evaluating a Cyber Risk Quantification Provider (CRQ Buyer’s Guide) Watch out for solutions that offer too-simple aggregation of risk scenarios, black-box algorithms and other cautions from the creator of the FAIR model. Read More
CRQ Buyer’s Guide – Pros and Cons of Cyber Risk Management with Security Ratings, Maturity Models and Threat Analysis They generate numbers but are they cyber risk quantification, useful for prioritizing risks by loss exposure in dollars? Read More
6 Red Flags when Evaluating a Cyber Risk Quantification Provider (CRQ Buyer’s Guide) Cyber risks that aren’t risks, qualitative risk analysis pretending to be quantitative and more hazards. Read More
Important Questions when Choosing a Cyber Risk Quantification Provider Part 2: Analytics & Reporting Jack Jones wrote Understanding Cyber Risk Quantification: A Buyer’s Guide to help those looking to move up the evolutionary scale in risk management and communicate cyber risk in the non-technical, financial terms that business leaders demand. Read More
