Measuring and Managing Information Risk: A FAIR Approach

Using the factor analysis of information risk (FAIR) methodology developed over ten years and adopted by corporations worldwide, Measuring and Managing Information Risk provides a proven and credible framework for understanding, measuring, and analyzing information risk of any size or complexity. Intended for organizations that need to either build a risk management program from the ground up or strengthen an existing one, this book provides a unique and fresh perspective on how to do a basic quantitative risk analysis. Covering such key areas as risk theory, risk calculation, scenario modeling, and communicating risk within the organization, Measuring and Managing Information Risk helps managers make better business decisions by understanding their organizational risk.

• How to Measure Anything in Cybersecurity Risk
• Security Risk Management: Building an Information Security Risk Management Program from the Ground Up
• How to Measure Anything: Finding the Value of Intangibles in Business
• Information Security Risk Assessment Toolkit: Practical Assessments through Data Collection and Data Analysis
• CISO Desk Reference Guide: A Practical Guide for CISOs
• The Failure of Risk Management: Why It's Broken and How to Fix It
• Security Metrics: Replacing Fear, Uncertainty, and Doubt
• CISO Desk Reference Guide Volume 2: A Practical Guide for CISOs
• Threat Modeling: Designing for Security
• CISO COMPASS: Navigating Cybersecurity Leadership Challenges with Insights from Pioneers