SIPmath Implementation of the Open Fair™ Risk Standard

During 2017, teamed up with the Open Group and San Jose State University to create a risk management application based on the SIPmath™ Standard. The Open FAIR™ risk methodology provides a factor analysis of information risk and represents an important step towards standardizing cyber risk.

The SIPmath version of FAIR has two advantages. First, by interactively simulating cyber risk in native Excel, it brings critical security concepts to a large audience. Secondly, by fitting into the probability management framework, it may be embedded in networks of other risk models to aggregate risk across the enterprise.