About
The FAIR Institute is dedicated to sharing and advancing standards and practices for measuring, monitoring, managing, and mitigating cyber risk. They focus on risk quantification and provide resources around the FAIR (Factor Analysis of Information Risk) framework. The institute aims to enhance the discipline of cyber and operational risk management through education, research, and collaboration, promoting a systematic approach to understand and communicate risk in a business context. They also provide metrics and analytics to improve organizational risk posture.
Related Vendors
Stern Security's Velocity platform provides data-driven cyber risk quantification, enabling organizations to accurately assess risk from both internal and third-party sources. This platform helps security teams optimize costs and demonstrate ROI by tracking improvements in security posture. Stern Security also specializes in penetration testing and virtual Chief Information Security Officer (vCISO) services, further enhancing organizations' security strategies. Through a comprehensive approach, Stern Security focuses on empowering businesses to secure their operations effectively.
Culinda offers a Cyber Asset Risk Management (CARM) platform designed to help businesses manage risk for thousands of on‑premise and external cyber assets. The platform can discover cyber assets including shadow IT, discover threats and vulnerabilities and prioritize them based on risk, and provide network visibility and lateral movement of threats. Culinda describes automated mediation via integration with network access control solutions and firewalls. Capabilities include third‑party risk management, security rating, dark web monitoring and continuous monitoring of security posture across the surface, dark and deep web. The product also claims to identify potential financial loss to the business using statistical modeling.
Numerix provides quantitative analytics, pricing, and risk solutions for capital markets. Its offerings include trading and risk management software and pricing and risk libraries for OTC and exchange‑traded derivatives, fixed income securities, and structured finance products available in Excel and SDKs for multiple languages. Platforms support valuations, market risk, counterparty risk, XVAs, OTC trading, and regulatory reporting. The company also references model validation tools and a cloud-based IDE connected to pricing and risk analytics, data, Python libraries, and APIs. Numerix describes its technology as embeddable into client systems or usable in client engagements to deliver accurate analytics and transparency for quants and operations teams.
