Carmelo's FAIR Risk Assessment Spreadsheet

Fill in the Minimum, Most Likely, and Maximum values for each factor based on the FAIR ontology. Click the button to run a Monte Carlo simulation (10,000 iterations) to calculate your Annualized Risk.

FAIR Assessment Question (Factor)

Minimum

Most Likely

Maximum

Threat Event Frequency (TEF) How many times per year is a threat agent expected to act against this asset? (e.g., 1, 5, 20)

Vulnerability (%) What is the probability (0-100%) that the asset's controls will fail when the threat acts?

Primary Loss Magnitude ($) What is the direct financial loss incurred per successful incident? (Response, replacement, etc.)

Secondary Loss Magnitude ($) What is the indirect financial loss per incident? (Fines, reputation damage, judgments)

Carmelo's FAIR Risk Assessment Spreadsheet

Simulation Results (10,000 Iterations)

Average Annual Risk

Median Annual Risk

90th Percentile Risk (Worst Case)