New FAIR Analysis

Create a new quantitative FAIR risk analysis

FAIR Formulas

LEF = TEF × Vulnerability

SLE = Primary Loss + Secondary Loss

ALE = LEF × SLE

<10K€

Minimal

<50K€

Low

<200K€

Moderate

<1M€

High

≥1M€

Critical

Annualized Loss Expectancy (ALE)

LEF

0.500

events/year

SLE

0 €

per event

ALE

0 €

per year

Risk Level

Minimal

Identification

Basic risk analysis information

Title *

Threat Scenario *

Describe the potential attack or incident scenario

Description

Asset at Risk

The information asset affected by this scenario

Asset Name *

Asset Value (€) *

Total asset value in euros

Loss Event Frequency (LEF)

Estimated annual frequency of loss events

Threat Event Frequency (TEF) (TEF) *

Number of attack attempts or events per year (0.01 to 100)

Threat Capability (1-5) *

Low3High

Contact Frequency (per year) *

How often per year the threat contacts the asset

Vulnerability

Probability the attack succeeds if attempted

Vulnerability Level (0-100%) *

50%

Attack success probability (0-100%)

Control Strength (1-5) *

Weak3Strong

Primary Loss

Direct losses resulting from the eventTotal: 0 €

Productivity Loss (€)

Cost of work interruptions

Response Cost (€)

Incident response cost

Replacement Cost (€)

Asset replacement cost

Fines & Judgments (€)

Regulatory fines, legal judgments

Competitive Advantage (€)

Loss of competitive advantage

Secondary Loss

Indirect losses and consequencesTotal: 0 €

Reputation Impact (€)

Damage to company reputation

Customer Loss (€)

Cost of losing customers

Regulatory Response (€)

Additional compliance costs

Current Controls

Security measures in place(ISO 27001/27002, NIST 800-53, CyberFundamentals)

Recommended Actions

Additional measures to reduce risk

Confidence & Metadata

Confidence Level *

Quality of data used for estimation

Data Source

Status *

Assessed By

Reviewed By

common.notes