FAIR Institute - FAIR model

Factor Analysis of Information Risk (FAIR™) is the only international standard quantitative model for information security and operational risk.

FAIR provides a model for understanding, analyzing and quantifying cyber risk and operational risk in financial terms.
It is unlike risk assessment frameworks that focus their output on qualitative color charts or numerical weighted scales.
It builds a foundation for developing a robust approach to information risk management.