The FAIR Institute ran an intense schedule at the recent RSAC24 Conference in San Francisco, with a nonstop, all-day flow of people at our booth, a packed evening event and an introductory seminar led by FAIR creator Jack Jones and Bernie Dunn.  ..read more

The FAIR Institute hosted a happy hour sponsored by Technical Advisor Safe Security at the 2024 RSA Conference that drew a packed house to a San Francisco wine bar, a crowd that, by a show of hands, was mostly new to quantitative cyber risk management, and clearly eager to drink up advice on starting and scaling a FAIR program from our guest speakers ..read more

In this article, I break down the UnitedHealth Group cyber-attack, giving an easy-to-understand overview packed with insightful details. I utilized the FAIR Materiality Assessment Model (FAIR-MAM) to quantify losses, drawing on data from UnitedHealth Group Incorporated's SEC Form 8-K/A (Amendment No. 2) filed on April 24, 2024, the Q1 earnings call, and Congressional testimony alongside lists of class action legal filings and regulatory investigations, and more sources.  ..read more

Using FAIR-MAM, the FAIR Materiality Assessment Model, the FAIR Institute ran a reality check on the costs reported by UnitedHealth Group for the massive ransomware attack on its Change Healthcare payments processing subsidiary on February 21, 2024. Our finding: The reported costs could be short by a factor of two from the probable total costs of the incident ..read more

The FAIR Institute recently introduced the FAIR Third Party Assessment Model (FAIR-TAM™), a new addition to the FAIR family of standards and models, created to shine light on the big blind-spot in cyber security, the loss exposure lurking unseen among supply chain partners or vendors.  ..read more

Expect to have your outlook on tech, cyber, AI, risk, the economy, and even your career path expanded when John Chambers, the outspoken former Executive Chairman and CEO (and current Chairman Emeritus) of Cisco, takes the stage to keynote the2024 FAIR Conference, October 1 & 2 at the Fairmont Hotel, Washington, DC ..read more

Tuesday, May 7, 2024, the FAIR Institute and our technical adviser Safe Security are hosting a happy hour with a purpose: to brief attendees at the 2024 RSA Conference on the latest compelling developments in scaling and automating FAIR, the standard for cyber risk quantification ..read more

SEC disclosure regulations in the US, NIS2 impact statements for cyber events in Europe – the regulatory trend is clear: companies must quantify the financial impact of cybersecurity risk and disclose when risk hits material levels.  The FAIR Institute developed the FAIR Materiality Assessment Model (FAIR-MAM™) as a defensible method to collect and analyze impact data and determine materiality ..read more

You could almost feel the future closing in at the recent FAIR Institute Europe Summit, where a panel of cyber risk experts from different disciplines gave some very timely tips and warnings about the AI wave about to hit business and government.  ..read more

The FAIR Institute welcomes members of the vast tech industry talent pool in India to join our new local chapter, officially launched recently with a well-attended meeting in Mumbai. The Institute now counts around 20 chapters and 15,000 members around the world, sharing best practices in FAIR (Factor Analysis of Information Risk) that empower risk professionals to collaborate with their business partners on balancing protection of the organization with advancing the business. Learn more about FAIR.  ..read more