UPDATE: The judge sentenced Sullivan to three years probation in part because the case was the first of its kind and warned CISOs not to expect such leniency going forward.
At RSAC23 this week, FAIR Institute Chairman Jack Jones challenged an audience of 400 in two seminars to move beyond today’s common cyber risk measurement practices
If you’re looking for an immersive experience with Factor Analysis of Information Risk (FAIR™) and cyber risk quantification, the 2023 RSA Conference in San Francisco in April is your opportunity to dive right in. The FAIR Institute will present these events at the prestigious security and risk conference:
Jack Jones, creator of FAIR™, the standard model for quantifying cyber and operational risk, leads two seminars at the 2023 RSA Conference on Tuesday, April 25, from 8:30am to 10:30am and 1:15pm to 3:15pm PT.
Again this year, the FAIR Institute has a major presence at the RSA Conference, April 24-27 in San Francisco, with two seminars led by cyber risk quantification authority Jack Jones
“Thought leadership” is a term that gets loosely applied to any kind of marketing material in the cyber risk/cybersecurity world – and then there’s Jack Jones, who has been indisputably out in front showing the risk and security professions the way up
Cyber risk analysis must scale to meet the rising challenges of cybersecurity, and automation of quantitative analysis will get us there.
Jack Jones, creator of Factor Analysis of Information Risk (FAIR™) and Chairman of the FAIR Institute, delivered a keynote address to the 2022 FAIR Conference emphasizing the fact that cyber risk measurement practices have been profoundly immature
Imagine that you’re looking for an encryption solution. There are many providers on the market, all of whom use one of the well-vetted public encryption standards. But let’s imagine there’s a new player in the market — one that claims to have a vastly improved, but proprietary, solution.
It was bound to happen. For years, Factor Analysis of Information Risk (FAIR™) was, for all intents and purposes, the only Cyber Risk Quantification (CRQ) model out there.
