Tag Archives: quantitative

The Ponemon Institute’s Data Breach Study

Posted on May 15, 2014 by Carmelo

In my opinion, the Ponemon Institute’s Cost of Data Breach Study is eye-opening. If you use a GRC tool that associates dollar amount loss per record, you should probably read this report and make the necessary changes. Increasing the cost … Continue reading →

Posted in Security Blog | Tagged , , , , , , , | Comments Off on The Ponemon Institute’s Data Breach Study

iRisk

Posted on March 24, 2014 by Carmelo

iRisk, or the iRisk equation is another quantitative analysis formula. Like most quantitative analysis models, you solve for the risk by calculating the threat and vulnerability, and lower the risk when mitigating or compensating controls are added. Here is where … Continue reading →

Posted in Security Blog | Tagged , , , , , , , , , | Comments Off on iRisk

What’s the Risk?

Posted on March 7, 2014 by Carmelo

When asked, what’s the risk? I find great pleasure in flexing my ability to break down potential loss in either qualitative or quantitative methods. The FAIR Quantitative Risk Model was taught to me by Jack Jones, the creator. I also … Continue reading →

Posted in Security Blog | Tagged , , , , , , , , | Comments Off on What’s the Risk?