Ideas that have helped shape cyber risk management

Jack Freund has spent more than two decades writing, researching, teaching, and speaking about cyber risk, quantitative risk analysis, governance, and decision making. His work ranges from foundational books on cyber risk quantification to research, practitioner articles, conference presentations, and executive education.

  • The foundational book on applying the FAIR standard to information and cybersecurity risk. The book established a practical approach for expressing information risk in financial terms and using quantitative analysis to support business decisions. View the book here.

  • An anthology of essays examining cyber risk management, quantification, governance, decision making, and the assumptions underlying common cybersecurity practices. View the book here.

  • The Risk Dr. is Jack Freund’s long running publication on cyber risk management, quantitative risk analysis, governance, and the risk profession. It brings together practical observations, research, and commentary developed across more than two decades working in cybersecurity and technology risk.

    Topics include cyber risk quantification, FAIR, risk measurement, risk appetite, governance, third party risk, cyber insurance, materiality, AI and emerging risk, and the challenges of turning risk analysis into useful decisions. View the site here.