Learn the basics of quantitative risk analysis using FAIR methodology or take a deep dive to become a FAIR practitioner. Our expertly developed training courses focus on Cyber Risk Quantification using the FAIR taxonomy and methodology—a logical, repeatable, defensible model for analyzing cyber and technology risk in financial and probabilistic terms.
For non-practitioners
4h
On-site or online
Next session: December 2nd
With our training:
You don't need to be a risk management expert or a security engineer to take this training.Basic knowledge of risk management concepts, cyber risks, and information security is beneficial.
For Practitioners
14h
On-site or online
Next session: December 4th & 5th
With our training:
This training prepares you for the Open FAIR certification. The exam fee is not included in the training price. Additional self-study exercises may be necessary before taking the certification exam.
For any questions or requests for information, our team is at your disposal. Feel free to contact us: we will be happy to guide you through your registration and answer any of your questions.
(Q&A, Exam preparation materials etc...)
Our Cyber Risk Quantification training programs are designed for business and IT professionals as well as other internal and external stakeholders within an organization, including:
is designed to verify that training institutions adhere to the quality standards set by the French government. The outstanding pass rate of course participants taking the Open FAIR certification exam attests to the quality of our courses.
Training participants consistently express high satisfaction with our CRQ training courses.
Open FAIR™ Certification exam
Cyber and technology risk is business risk. Cyber risk quantification builds resilience with informed decisions.
CRQ training will provide you with the tools and processes to analyze cyber risk differently. Learn how quantification can improve your infosec budget decisions and communication with critical stakeholders.
Your organization’s cybersecurity governance, business processes and communication will improve with risk-based and data-driven analysis techniques. The quantification of cyber and technology risk using the FAIR methodology allows risk managers, decision-makers, auditors and risk analysts to talk about risk in financial terms.
You will acquire a broad understanding of the FAIR taxonomy and analysis methodology so that you are equipped to scope risk scenarios using the FAIR methodology, estimate the data required to perform quantification, and interpret the results.
Translate cyber risks into business terms, bridging the gap between IT professionals and executive leadership. With CRQ you can make defendable strategic recommendations while avoiding biases by applying statistical methods to estimate the probability and impact of potential cyber incidents.
We provide the materials and support to pass the Open FAIR™ Certification. The certification validates that you have mastered the fundamentals of the Open FAIR Body of Knowledge and understand of the core principles of risk analysis using the FAIR taxonomy.
Learn from FAIR-certified trainers, who will equip you with the knowledge and resources to begin scoping risk scenarios.
The FAIR certification exam validates that examinees have fully mastered the FAIR taxonomy and the key concepts of the FAIR Standard. It is the only international standard quantitative model for information security and operational risk. As cybersecurity legislation and compliance regulations evolve, your quantification expertise will be in demand.
Introduction to CRQ for the Non-Practitioner participants will be provided with a training manual with training content, exercises and key points, including FAIR on a page.
CRQ using FAIR for Practitioners participants will be provided with a training manual with training content, exercises and key points, including FAIR on a page. You will also receive a multiple choice preparatory test for the Open FAIR™ Certification exam.
Our onsite training facility in Paris is equipped to received disabled participants and our trainers have participated in disability inclusion training.
It is important to start with a solid foundation in cybersecurity, with an understanding of threats, vulnerabilities, and defenses. This is then paired with a quantitative analysis method such as the FAIR methodology, which involves scoping risk scenarios using statistical methods to estimate the likelihood and impact of potential cyber incidents. Integral to this process is a solid understanding of a risk management framework, providing the structure for assessment methodologies.