Cyber Risk Assurance informed by FAIR - Seguridad Mania.com - España y América Latina

This presentation explains how to use the Monte Carlo simulation module in @Risk to enable accurate calculation of cyber risk for disclosure purpose. Cyber risk is recognised as a material enterprise risk which must be accounted for in financial disclosure. The SEC Cybersecurity Disclosure Guideline1 demands the inclusion of cyber risk disclosure in annual filing. The SOC2 attestation standard, developed by the American Institute of Certified Public Accountants (AICPA)3 , is a well-established methodology for assessing sufficient of cyber risk disclosure for service organisation. The NIST endorsed Open Group FAIR4 cyber risk quantification methodology, leveraging Monte Carlo simulation, is a global standard for measuring cyber risk expressed in dollar values. The presenters will walk through the methodology using @RISK to support FAIR analysis.