FAIR Analysis of Fictitious Firm - Case Study - Part 4a
- David

- May 10, 2024
- 2 min read
Updated: Mar 26
For a potential ransomware event that could impact the availability of a fictitious medium-sized healthcare firm (see Part 1-3 of the case study used in the analysis), I meticulously conducted a Monte Carlo simulation using the FAIR technique (Taxonomy - Figure 1). The result, assuming average firm resilience and a sophisticated threat actor, was a loss of up to $1 million. This level of accuracy in the analysis, along with the inclusion of detailed cost assumptions (as Part 4b), should instill confidence in the assessment.

