Leadership

Training and
Certification

FAIR Institute Course Catalog

Since 2017, the FAIR Institute has trained more than 10,000 professionals worldwide to quantify, communicate, and manage cyber risk using the FAIR™ model.

Our training portfolio is designed for both practitioners and executive leaders, offering two distinct learning paths:

  • Certified Cyber Risk Professional (CCRP): A comprehensive curriculum that equips cybersecurity and risk professionals with the knowledge and practical skills to perform quantitative cyber risk analysis, communicate risk in financial terms, and support better business decisions.
  • Cyber Risk Management for Executives: An executive-focused complementary online course that helps senior leaders and board members understand cyber risk from a business perspective, enabling more informed governance, investment, and strategic decision-making.

 

Through expert instruction, practical exercises, and real-world case studies, FAIR Institute training provides a common language for cyber risk that helps organizations improve decision-making, strengthen risk management programs, and align cybersecurity investments with business objectives.

Access the Course Catalog

FAIR Certified Cyber Risk Professional (CCRP)

The Certified Cyber Risk Professional (CCRP) credential is designed for cybersecurity, technology, risk, and business professionals who want to demonstrate practical expertise in cyber risk quantification using the FAIR model.

Participants gain the knowledge and skills to:

  • Perform quantitative cyber risk analyses using FAIR.
  • Communicate cyber risk in financial terms.
  • Support executive and board-level decision making.
  • Improve prioritization of cybersecurity investments.
  • Apply FAIR within enterprise risk management programs.

 

The CCRP curriculum combines foundational knowledge with practical application, helping practitioners confidently quantify and communicate cyber risk across their organizations.

Learn more about the CCRP curriculum and upcoming training opportunities.

Enroll on FAIR Academy

Cyber Risk Management for Executives

Cyber Risk Management for Executives is a complimentary, self-paced online learning program created by executives, for executives. Designed for board members, C-suite leaders, business executives, and risk professionals, the program explains why cyber risk is fundamentally a business risk—and how leaders can make more informed decisions using a common language for cyber risk.

Through five concise courses, participants gain practical insights into governing cyber risk, evaluating investment decisions, and engaging more effectively with cybersecurity and risk teams. No technical background is required.

The curriculum includes:

  • Foundations of Cyber Risk Management with FAIR – Understand cyber risk as a business issue and the principles of quantitative cyber risk management.
  • Practical Applications of FAIR for Cyber Risk Management – Learn how FAIR enables organizations to quantify cyber risk and support better business decisions.
  • Executive Communication and Governance with FAIR – Discover how executives and boards can use FAIR to improve governance, oversight, and strategic decision-making.
  • Advancing FAIR Within Risk Management Programs – Explore how organizations mature their cyber risk management capabilities and integrate FAIR into enterprise risk practices.
  • Understanding Cyber Risk Reporting with FAIR – Learn how to interpret cyber risk reports, evaluate financial exposure, and communicate risk with greater confidence.

Whether you're overseeing cybersecurity strategy, serving on a board, or leading business operations, this program provides the knowledge needed to make more informed, risk-based decisions and better align cybersecurity with organizational objectives.

Register for Free on FAIR Academy

Instructor-Led Classes

FAIR Foundations

Upcoming Session:
- Week of August 31

This virtual, instructor-led course is delivered two hours per day for five days. This curriculum provides a comprehensive introduction to Factor Analysis of Information Risk (FAIR), the leading quantitative model for managing cyber and operational risk. Participants will explore the limitations of traditional risk management approaches and gain an understanding of how FAIR provides a structured, data-driven methodology for assessing and communicating risk.

FAIR Cyber Risk Analysis

Upcoming Session:
- Week of September 14

This virtual, instructor-led course is delivered two hours per day for five days. The curriculum develops the core competencies required to perform quantitative cyber risk analysis using the FAIR model. This course provides participants with a step-by-step approach to analyzing cybersecurity risk scenarios in financial terms—enabling more informed business decisions.

Cyber Risk Communication and Reporting

Upcoming Session:
- Week of August 17
- Week of September 21

The Cyber Risk Communication and Reporting course equips FAIR practitioners to translate complex risk data into insights that drive confident decision-making. Learn to present quantified risk in a way stakeholders understand, align reporting to different audiences, and deliver messages that inspire action across the organization.

Enroll on FAIR Academy