FAIR Risk Calculator

Factor Analysis of Information Risk — quantitative risk model

Perform quantitative risk analysis using the FAIR (Factor Analysis of Information Risk) model. Calculate Loss Event Frequency from Threat Event Frequency and Vulnerability, estimate Loss Magnitude from primary and secondary losses with probability adjustments, and derive annualized risk exposure. Includes optional best/worst case scenario analysis for range-based risk estimation.

Risk Scenario Name

Loss Event Frequency (LEF)

Threat Event Frequency (per year) How often does the threat agent act against the asset per year?

Vulnerability (%) Probability the threat event results in loss (0-100%)

Loss Magnitude (LM)

Primary Loss ($) Direct cost per incident (response, recovery, replacement)

Secondary Loss ($) Indirect cost (fines, lawsuits, reputation damage)

Secondary Loss Probability (%) Chance that secondary losses occur (0-100%)

Scenario Analysis (optional)

Provide best-case and worst-case estimates for a range analysis.

Best-Case TEF

Worst-Case TEF

Best-Case Vulnerability (%)

Worst-Case Vulnerability (%)

Best-Case Primary Loss ($)

Worst-Case Primary Loss ($)

FAIR Risk Calculator

Loss Event Frequency (LEF)

Loss Magnitude (LM)

Related Tools

CVSS v3.1 Calculator

Risk Score Calculator

DREAD Calculator

Security ROI Calculator