Creator of the FAIR model for quantitative cyber risk analysis Jack Jones is just out with the everything-you-need-to-know guide to be an informed shopper for a cyber risk quantification (CRQ) solution.
Interest in applying a financial approach to cyber risk has never been higher in the infosecurity community — but so has confusion about what is true quantification, its value proposition, and its strengths and limitations.
In this product-agnostic and jargon-free white paper, Jack gives you the objective, hands-on advice you need to confidently leverage CRQ.
“The cyber risk landscape is increasingly impactful, complex and dynamic,” Jack writes, “and organizations have limited resources to apply to the problem…This means that cyber risk management programs must be able to effectively prioritize an organization’s cyber risk concerns and choose cost-effective solutions. Both of these require the ability to measure cyber risk well.”
Among the sections of the guide: