Cyber Risk MANAGEMENT AND
ENTERPRISE RISK QUANTIFICATIon

NIST IR 8286: Integrating Cyber and ERM Driving Financial Risk Outputs

MEET CRFQ

SIRACON 2025

FAIRCON 2025

CRQ Meets Insider Risk Webinar

NIS2 and Cyber Risk Management Webnar

Resources:

The CRFQ Mentality and Methodology

OPTIXX Research: TPRM 2.0 

OPTIXX Research: Merck v Ace Insurance et al 

JACK JONES, CHAIRMAN EMERITUS OF THE FAIR INSTITUTE CONTINUES INNOVATION: FAIR-CAM MEETS AI

  • CHAT-GPT based FAIR-CAM engine

  • Visualize FAIR-CAM at work

  • Provide feedback to drive the operationalization of FAIR-CAM

Y CRFQ?

Without getting too trite; we understand that you have a choice in Cyber Risk Quantification providers. Here’s why we think you should pick us:

Our knowledge and expertise is derived from: being one of the very first creators of a cyber risk quantification methodology, assisting with one of the very first cyber insurance policies, CFO proof risk analysis, defensible disclosure development for regulatory purposes like the SEC and our work with the MITRE ATT&CK® standard for threat modeling.

We have been and will be in this for the long haul. Check out our founder’s interview on CFO.com.

Our family of partners, experts and thought leaders provide us with the ability to bring specific domain expertise to formulate risk reduction solutions we call it La Famiglia (that one’s for you mom).

  • No risk management program can be successful without effective executive engagement and communication. We work to ensure you are delivering the right risk data, in the right format so t easily consumed and understood. It is this essential need that drove the development of Cyber Ledger.

  • We have worked with customers at every stage of maturity. Whether you are looking to enhance the success of your existing cyber risk management program by adding a layer of CRQ to the mix, or you’re trying to justify your budget we have the ability to make you look fantastic to both internal and external audiences.

  • How do I sell funding a CRQ program the CFO? How do I integrate my CRQ program with our enterprise risk management team?

    What capabilities does a great cyber risk analyst need? How do I execute interviews with sales and marketing leaders in their vocal. How do I prioritize incoming risk analysis requests?

  • You know those kids that everyone hated in school? The ones that managed to excel academically AND still make it to every party. Well (un)fortunately that was us. We’ve all grown a lot but we still like our friends to enjoy work, dine with gusto and laugh aloud.