FAIR – Factor Analysis of Information Risk
FAIR helps people measure cyber risk in money. Instead of saying a risk is “high,” “medium,” or “low,” or as “red”, “yellow”, or “green”, FAIR asks better questions: FAIR is useful because businesses need to make decisions. For example, should a company spend $50,000 on a new security tool? Should it hire more security staff?…