The RiskLens FAIR Enterprise Model™

The FAIR model revolutionizes cyber risk management by providing a standard taxonomy and analytics model that organizations can use to consistently define, measure and communicate about cyber risk.

The elegance, clarity and practicality of FAIR, and the availability of FAIR spreadsheets and free tools such as FAIR-U, has led many organizations to quantify cyber risk in financial terms for the first time ever, and to finally articulate it in the same fashion as other forms of enterprise risk such as market and credit risk.

However, these organizations have discovered that building risk management programs around FAIR is not that simple of an undertaking. For some, it took years and in some cases many millions of dollars in R&D, to realize that adopting FAIR as a common language and measurement model for cyber risk was just the first step, and that enterprise needs could not be met by FAIR alone. Scaling FAIR can be hard without a set of best practices for enterprise adoption.

This is where the RiskLens FAIR Enterprise Model™ comes into play.

The RiskLens FAIR Enterprise Model™ provides a blueprint for marrying cybersecurity, threat and loss data to produce actionable risk analytics and enable effective risk management. RiskLens provides cyber risk leaders with a decision support capability to make cost-effective investment decisions and manage cybersecurity from the business perspective.

RF-EM™ provides the following benefits:

• Better alignment between security, audit, the business and the board by articulating cyber risk in financial terms
• Confidence to manage cyber risk according to the FAIR standard and risk management standards such as ISO 31000/27000, NIST 800, Octave Forte, COSO
• Faster adoption of FAIR best practices via pre-packaged, software as-a-service solutions built to the RF-EM standard such as:
  • Risk Landscape Clarity
  • Operational Decision Support
  • Strategic Decision Support