FAIR Risk Model Calculator

Quantify your information security risks using the Factor Analysis of Information Risk (FAIR) model.

Risk Scenario 1


Loss Event Frequency (LEF)

This section determines how often a loss event is expected to occur. It is calculated from Threat Event Frequency and Vulnerability.

How many times per year a threat is expected to act.

The probability a threat event becomes a loss event.

Loss Magnitude (LM)

This section determines the probable financial loss when a loss event occurs. It's the sum of Primary and Secondary losses.

Direct costs from the event (e.g., hardware replacement).

-

Indirect costs (e.g., reputational damage, fines).

-

Mitigating Controls

Enter the annualized cost of controls and their effectiveness in reducing vulnerability.

Annualized cost of the control.

The percentage vulnerability is reduced by.