← Back to Resources

New study on extreme cyber loss events

PDF | Quantitate Risk Management Program

Hello everyone. In my FAIRcon 2020 talk, I referenced a study that I thought would be out prior to the event. Unfortunately, that didn't happen, but I'm glad to say that it's now available. The Information Risk Insights Study (IRIS) 20/20 "Xtreme edition" focuses on the 100 largest loss events of the last 5 years. I'm hoping FAIR practitioners will benefit from data around questions like "How often does a major $incident happen?" or "What would a really bad $incident cost us?" We also look into primary and secondary loss frequency/magnitude using the FAIR loss forms. Hope you find it useful

Link (no registration required): https://www.cyentia.com/iris/