Resources Listing

Blog

Microsoft Hack Reignites the Cloud vs On-Prem Debate

Risk Management | Industry Insights

Blog

Boards: 5 Things about Cyber Risk Your CISO Isn’t Telling You

Risk Management | Industry Insights

Blog

How FAIR & ISO 27001 Work Together

Risk Management

Blog

4 Ways RiskLens Clients Will Drive Success in 2021 with Quantitative Cyber Risk Management Programs

Risk Management

Blog

Lessons Learned from Pandemic Tabletop Exercises – Successful Cyber Risk Analysis with Little Time and No Data

Risk Management | Success Stories

Blog

Making It Easier and Faster to Optimize Your Cybersecurity Budget

Risk Management | Guides & Tips

Blog

3 Steps to Prioritizing Control Investments with RiskLens Rapid Risk Assessment and Risk Treatment Analysis

Risk Management | Guides & Tips

Blog

Meet the New NIST Standard for Integrating Cybersecurity into ERM with RiskLens Risk Assessment

Risk Management | Government

Blog

NIST Recommends FAIR for Integrating Cybersecurity with Enterprise Risk Management

Risk Management | Guides & Tips

Blog

New from RiskLens: Compare Risk Treatment Options Based on Cost-Benefit Analysis

Risk Management

Blog

New from RiskLens: Let Us Help You Build a Sustainable Quantitative Risk Management Program

Risk Management | Company and Product News

Blog

RiskLens Platform Now Integrated with RSA Archer Risk Register

Risk Management

Blog

New on the RiskLens Platform: Out-of-the-Box Data on Fines & Judgments for Breach Risk Analysis

Risk Management | Guides & Tips

Blog

RiskLens Unveils a New Triage Function for Rapid Risk Quantification

Risk Management

Blog

New eBook: Set Up Your FAIR Program in 7 Steps

Risk Management | Guides & Tips

Blog

Benefits of Using RiskLens to Prioritize Bug Remediation

Risk Management | Guides & Tips

Blog

Admit It. You Don't Really Measure Your Cybersecurity ROI

Risk Management | Guides & Tips

Blog

Download this Policy Document to Start Your Quantitative Cyber Risk Management Program Right

Risk Management | Guides & Tips

Blog

RiskLens Unveils the RiskLens FAIR Enterprise Model™

Risk Management | Company and Product News

Webinar

Webinar: Building a Successful Quantitative Risk Management Program

Risk Management | Guides & Tips

Blog

How to Describe to Your CEO the Benefits of RiskLens, FAIR and Cyber Risk Quantification in 3 Minutes

Risk Management | Risk Economics

Webinar

Webinar On-Demand: "Make the 'Impossible' Possible - Quantify Cyber Risk"

Risk Management | Guides & Tips

Webinar

Webinar: “Align Security to Your Business – Quantify Cyber Risk”

Risk Management

Webinar

Webinar: 4 Reasons InfoRisk Analysts Should Know FAIR

Risk Management

Webinar

Webinar: How To Report On The Risk Of Ransomware To Your Management

Risk Management

Webinar

Webinar: Risk Quantification, the Business Lens for Your Security Operation

Risk Management

Webinar

Webinar: Case Study - RiskLens Settles a Decision on Controls

Risk Management

Webinar

Webinar: New SEC Guidance on Cyber Risk Disclosure - Can You Lead the Change?

Risk Management | Guides & Tips

Webinar

Webinar: Ransomware – Recipe for Assessing Potential Impact

Risk Management

Webinar

Webinar: Build a Quantitative Cyber Risk Management Program with RiskLens

Risk Management

Webinar

Webinar: New Phishing and Work from Home Risk Assessments to Help Your Organization Cope with COVID-19

Risk Management

Case Study

Case Study: Reducing Cyber Risk from Employees Working at Home

Risk Management | Success Stories

Case Study

Case Study: Find the Most Cost-effective Controls against Cyber Attack on a Railroad’s Automated PTC Safety System

Risk Management

Case Study

Data Breach Case Study: How RiskLens Modeled Risk Mitigation and ROI

Risk Management

Blog

RiskLens’ Jack Freund Tells AICPA Magazine How CFOs and CISOs Can Connect on Cyber Risk

Risk Management | Risk Economics

Blog

Quantitative Risk Reporting Stratification: Know Your Audience

Risk Management | Guides & Tips

Blog

Jack Freund in ‘Risk Management’ Magazine Predicts More Pressure on Boards for Cyber Risk Disclosure in 2020

Risk Management | Industry Insights

Blog

Jack Freund in ‘Homeland Security Today’ on How to Make a Business Case for Federal Cloud Migration with FAIR™

Risk Management | Industry Insights

Blog

Cyber Risk Now the Top Business Risk in Annual Allianz Risk Managers Survey

Risk Management

Blog

Cybersecurity Risk and Lessons Learned from Credit and Market Risk Quantification

Risk Management | Industry Insights

Podcast

Podcast: Jack Freund on How to Prepare for an Iranian Cybersecurity Threat

Risk Management

Blog

Why Boards Tune Out CISOs: Lessons from 2 Conference Panels

Risk Management

Case Study

Case Study: Analyzing the Financial Risk of Ransomware with FAIR

Risk Management | Guides & Tips

Blog

New Year, New You: 7 Resolutions for InfoSecurity and Risk Professionals

Risk Management | Guides & Tips

Blog

How to Ensure Your IT Risk Committee Speaks the Same Language

Risk Management | Guides & Tips

Blog

Jack Freund in ‘Homeland Security Today’ on the Failure of Federal Cyber Risk Management

Risk Management | Government

Blog

Definitions: Cyber Risk vs. Technology Risk. What’s the Difference?

Risk Management

Blog

EY Report Finds “Modest Improvement” in SEC Disclosure on Cybersecurity, Suggests Boards Get More Active in Cyber Risk Oversight

Risk Management | Risk Economics

Blog

Podcast: How to Understand Risk in Artificial Intelligence (AI) and Cybersecurity – Jack Freund

Risk Management

Blog

How to Set a (Meaningful) Cyber Risk Appetite with RiskLens

Risk Management

Blog

CIO Dive on How FAIR Answers Questions the Board Wants Answered

Risk Management

Case Study

Case Study: Reducing Web Application Attack Risk with RiskLens

Risk Management | Risk Economics

Blog

How Cyber Risk Quantification Brings Sanity to PCI Risk Assessments

Risk Management

Blog

4 Steps to a Smarter Risk Heat Map

Risk Management | Guides & Tips

Blog

Advisen’s Annual Survey on Cyber Insurance Finds Business Interruption Now Tops Concerns

Risk Management | Risk Economics

Video

Tips on Using FAIR to Answer an IT Audit Finding (Video)

Risk Management | Guides & Tips

Blog

Adding Dollars and Cents to Your NIST CSF Reporting

Risk Management | Risk Economics

Blog

4 Successful Starter Projects with RiskLens (and 3 More to Do Next)

Risk Management | Guides & Tips

Events

Hear Jack Jones Speak on Cyber Risk for Boards at NACD Summit Tues. - Meet Us at RiskLens NACD Booth

Risk Management

Blog

Imperva Data Breach: Learn these Lessons

Risk Management

Blog

Feds Get More Risk-Aware with Energy Dept. and DHS Cybersecurity Plans

Risk Management

Blog

Finance Managers Shouldn’t Settle for Less in Cyber Risk, Nick Sanna Writes in ‘Treasury & Risk’

Risk Management

Blog

Protecting Customer Data, Making the Case for Budget Top CISO Concerns in Forbes Survey

Risk Management

Blog

Five Promises You Can Make to Your Board on Cyber Risk

Risk Management

Blog

How I Analyzed the Top 10 Cybersecurity Risks for a Financial Institution (a Deep Dive)

Risk Management

Blog

To Make Your Risk Management Program Fly, First Fix Your Language

Risk Management

Blog

GAO Grades Federal Agencies ‘Fail' on Cyber Risk, Accelerating Movement to CRQ

Risk Management

Blog

Boards: 5 Things about Cyber Risk Your CISO Isn't Telling You (without Risk Quantification)

Risk Management

Blog

How Do You Measure the Value of Cybersecurity Controls? (Part 2)

Risk Management | Risk Economics

Blog

Wall St. Journal Says FAIR Helps Companies ‘Better Understand Cost of Cyber Threats’

Risk Management | Industry Insights

Blog

Jack Freund in ‘Homeland Security Today’: New DHS Directive Shows Need for Cyber Risk Quantification at Federal Agencies

Risk Management

Blog

Journal of Cyber Policy Names RiskLens Among ’Advances in Quantification and Management of Risk’

Risk Management

Blog

RiskLens CEO Says Feds Need “Real Cyber Hygiene”

Risk Management

Blog

Metrics? What Metrics? Finding the Missing Link to the NIST Cybersecurity Framework - Larry Clinton of ISA

Risk Management

Blog

Risk Analysis or Risk Assessment? Know the Difference

Risk Management

Blog

Help, My Risk Register Is a Disaster!

Risk Management

Case Study

Case Study: Using RiskLens to Meet GDPR and NYDFS Cyber Regulations

Risk Management | Success Stories

White Paper

White Paper: The Bald Tire Scenario

Risk Management | Success Stories

Infographic

Break out of Risk Management Groundhog Day

Risk Management

White Paper

Is Your GRC Investment Letting You Down?

Risk Management | Risk Economics

Blog

Cyber Risk Quantification Movement Hits Federal Government, DOE in the Lead

Fair Risk Analysis | Risk Management

Case Study

Case Study: Manufacturer Makes Risk-based Decision on Ransomware Controls

Risk Management | Manufacturing Industry

Blog

This Week’s Gartner Summit and the Next Phase of Integrated Risk Management

Risk Management | Risk Economics

Case Study

Case Study: Risk Team Finds the Best Data Protection Solution Based on ROI

Risk Management | Risk Economics

Blog

Shooting for the Right Level of Precision in Risk Quantification

Risk Management

Blog

Streamline Your Risk Assessment Process with FAIR

Risk Management

Blog

RiskLens Loss Tables: What They Are And Why We Love Them

Risk Management

Blog

What Exactly is Annualized Loss Exposure?

Risk Management | Risk Economics

Blog

The Risk of a Controls Focus in IT Audit: Losing Sight of the Asset

Risk Management | Risk Economics

Blog

How Much Cyber Insurance Do We Need?

Risk Management | Risk Economics

Blog

5 Key Tasks in a Risk Assessment [Infographic]

Risk Management

Blog

On the Maturity of an Information Risk Management Practice and RiskLens

Risk Management

Blog

A Blueprint for Success in Building a Risk Quantification Program with RiskLens

Risk Management

Blog

5 Questions Boards Should Ask About Cyber Risk [Infographic]

Risk Management

Blog

SEC Tells Public Companies to Up Their Game in Assessing and Disclosing Cyber Risks

Risk Management

Blog

Are There Better Alternatives To Heat Maps?

Risk Management | Guides & Tips

Case Study

Case Study: What’s the Value of a Data Retention Policy?

Risk Management

Case Study

Case Study: Finding a Cost-Effective Fix for Employees Leaking Confidential Data by Email

Risk Management

Case Study

Case Study: Risk Management Team Uncovers True Cost of Global IP Theft

Risk Management

Case Study

Case Study: Manufacturing Co. CISO Justifies Project to Protect IP from Cyber Theft

Risk Management | Manufacturing Industry

White Paper

Improving Risk Decisions

Risk Management

Blog

What Does a Gartner Shift From GRC to IRM Mean for Risk Management Programs?

Risk Management

Blog

4 Ways RiskLens Beats Spreadsheets for FAIR Risk Analysis

Risk Management

Video

Video: Jack Jones on Quantifying Cloud Risk

Risk Management

White Paper

The Open Group Standard for Risk Taxonomy

Risk Management | Risk Economics

Video

Jack Jones Podcast: How to Apply Critical Thinking to Build Defensible IT Security Investments

Fair Risk Analysis | Risk Management

Blog

Hire a CISO Quick. New York Cybersecurity Regulations Deadline Coming.

Risk Management | Risk Economics

Blog

What Do CISOs Need To Tell The Board About Cyber Risk

Risk Management

Blog

How to Manage a Cybersecurity Program with NIST CSF and FAIR

Risk Management

Blog

Cyber Risk Tops 2019 Worries for Business, Say Conference Board, World Economic Forum

Risk Management

Blog

Too Many CISOs and Technology Risk Executives Miss the Big Picture

Risk Management

Blog

Fixing Third Party Risk Management

Risk Management

Blog

RiskLens In-Depth: Leveraging a Defined Risk Appetite Metric

Risk Management | Guides & Tips

Blog

How to Effectively Translate IT Risks to Business Risks

Risk Management | Risk Economics

Blog

How Sensitivity Analysis Can Help Identify Your Best Risk Reduction Levers

Risk Management

Blog

Quantification Is Key To Business Ownership Of Cyber Risk

Risk Management

Blog

Pitfalls of Overly Precise Cyber Value-at-Risk Models - Part 2

Risk Management

Case Study

Case Study: Manufacturing Co. CISO Justifies Project to Protect IP from Cyber Theft

Risk Management | Manufacturing Industry

Blog

Another Probable Loss in a Data Breach: Your Job

Risk Management | Risk Economics

Blog

Building a Quantitative Risk Management Program with FAIR and RiskLens

Risk Management

Blog

Risk News & Trends: Risk Analysis of Your Boss; Insider Threat Survey; FAIR for Banks

Risk Management

Blog

How GDPR Will Change the Way Organizations Assess and Manage Risk

Risk Management

Blog

How to Improve the Cyber Risk Signal-to-Noise Ratio

Risk Management

Blog

[PODCAST] Assessing The Risk Associated With IT Hygiene

Risk Management

Blog

Understanding FAIR - The Business-Aligned CISO's Best Friend

Risk Management

Blog

Regulators Are Asking For More Formulaic Approaches for Measuring Risk

Risk Management

Blog

Rate Your Team - Take the FAIR Institute’s Risk Management Maturity Survey

Risk Management

Blog

SEC Shows Its Teeth on Cybersecurity: $35 Million Fine in Yahoo! Breach Case

Risk Management | Risk Economics

Blog

Detailed Versus High-Level Cyber Risk Analysis: A Balancing Act

Risk Management

Blog

CISOs & Information Risk Officers – Maintaining Relevance

Risk Management

Blog

If Personal Financial Management Were More Like Common Risk Management

Risk Management

Blog

Measuring Aggregate Risk Analysis

Risk Management

Blog

Cyber Risk Maturity Level: Find Your Weakness and Build Your Success

Risk Management | Guides & Tips

Blog

Ensuring the Success of Nascent Cyber Risk Management Programs in Government

Risk Management | Government

Blog

Elevate Your Board's Understanding of Cyber Risk. Send Them to School

Risk Management

Blog

How Much Risk Is Associated With Ransomware?

Risk Management | Risk Economics

Blog

How Does Consumer Behavior Following A Credit Card Breach Affect Cybersecurity Risk?

Risk Management | Risk Economics

Blog

Cyber Risk Quantification: “Getting it Right”

Risk Management

Blog

Board Members Are Thinking Seriously About Cyber Risk

Risk Management

Blog

Why Quantification is the Core of Effective Risk Management

Risk Management

Blog

Is Anti-Phishing Training Effective at Reducing Risk?

Risk Management

Blog

How Boards Really Feel About Cyber Security Reports

Risk Management

Blog

Cybersecurity Risk Quantification: from Fad, to Trend, to Mainstream - Part 2

Risk Management

Blog

Wall St. Journal on Proving Business Value in Cybersecurity to Boards

Risk Management

Blog

Do Your Top 10 Risks Align With Reality?

Risk Management

Blog

3 Business Concepts Every Cybersecurity Risk Analyst Should Know

Risk Management

Blog

Assessing Cyber Risk in Legacy Systems with RiskLens

Risk Management | Risk Economics

Blog

Analyst Tips: How To QA Review Your FAIR Analysis In Only 5 Minutes

Risk Management

Blog

How to Assess Human Error in Cyber Risk: Chad Weinman in ‘ThreatPost’

Risk Management

Blog

ISO 31000:2018 Risk Management Guidelines Are Good Advice, Up to a Point

Risk Management

Blog

What's Missing in the NACD Director's Cyber Risk Oversight Handbook

Risk Management

Blog

What I Learned Leaving Internal Audit for Risk Management

Risk Management

Blog

Prepare for the Next Ransomware Epidemic with a FAIR Analysis

Risk Management

Blog

Making Your IT Audit Job More Than Compliance

Risk Management

Case Study

Case Study: Data Walking Out the Door. Data Masking Worth It?

Risk Management

Blog

Cyber Insurance: Smart Shopping When “Every Policy Is Different”

Risk Management

Blog

CIROs: Do Your Analysts Use the Right Risk Model for Cost-Effective Decision Making?

Risk Management | Risk Economics

Blog

Join Jack Jones, Nick Sanna for NACD Forum ‘Demand More in Cyber Risk Reporting’

Risk Management

Blog

Assumptions in Risk Analysis Are a Powerful Thing

Risk Management

Blog

Introducing Cyber Risk Quantification to Your Enterprise Risk Team

Risk Management

Blog

Directors: Cybersecurity HAS Joined ERM

Risk Management

Blog

How RiskLens Can Help Banks Meet Board-Approved Residual Cyber Risk Levels

Risk Management

Blog

Marvel at the Simplicity of Communicating Cyber Risk to the Board

Risk Management

Blog

How CIOs Can Teach Technology Risk to CEOs: A Mini-Guide

Risk Management | Guides & Tips

Blog

My Risk Problem and How I Solved It

Risk Management

Blog

Avoiding Garbage In/Garbage Out in Cyber Risk Measurement

Risk Management

Blog

Modernizing Government Technology Act: Make Your ‘Strong Business Case’ for Cybersecurity

Risk Management | Government

Blog

Communicating Risk Beyond GRC

Risk Management

Blog

In Quantitative Risk Analysis, Words Matter, Too

Risk Management | Industry Insights

Blog

Think You Don’t Have the Data to Quantify Risk? Think Again.

Risk Management

Blog

Putting Cyber Threat Intelligence in Your Quantification Program

Risk Management

Blog

Cyber Risk Quantification: Ditch The Spreadsheet And Take A Seat At The Business Table

Fair Risk Analysis | Risk Management

Blog

Risk Management Maturity Models: Not a One-size Fits All

Risk Management

Blog

Demanding More of IRM: Risk Assessments

Risk Management

Blog

Quantifying Cyber Risk with FAIR and RiskLens

Fair Risk Analysis | Risk Management

Blog

The 4 Purposes Of Risk Assessments

Fair Risk Analysis | Risk Management

Blog

Jumpstart Your Cyber Risk Quantification Program With New Customer Success Packages

Risk Management | Company and Product News

Blog

The Inherent Problems of Vendor Risk Assessments Without A Model

Fair Risk Analysis | Risk Management

Blog

What Is The Right Kind of Quantification in Cyber Risk Management?

Fair Risk Analysis | Risk Management

Blog

How To Make Risk Informed Decisions About Moving To The Cloud

Risk Management

Blog

Two Questions Every Risk Assessment Should Answer - Part 1

Risk Management | Guides & Tips

Case Study

Finding a Cost-Effective Fix for Employees Leaking Confidential Data by Email

Risk Management | Risk Economics

Case Study

Quantifying Cloud Risk

Risk Management

White Paper

FAIR Analysis QA Guide

Fair Risk Analysis | Risk Management

Case Study

Industrial Company Assesses Ransomware Threat

Risk Management | Industry Insights

Podcast

Remove Emotion From Cyber Security Decision Making

Risk Management

Case Study

Healthcare Provider Assesses Risk Associated with IT Hygiene

Risk Management | Healthcare Industry

Case Study

Justify Security Investments with Risk Quantification

Risk Management | Risk Economics

Blog

Risk Management Groundhog Day

Risk Management

White Paper

Improving Risk Decisio

Risk Management

The FAIR™ Model Explained in 90 Seconds