Nine years ago, the CISO of a Fortune 100 insurance and financial services company set out to find the answers to the questions facing our industry. The result of his effort was Factor Analysis of Information Risk, better known as FAIR. FAIR is a model for risk and risk management that provides an unparalleled ability to develop quantitative answers to questions like:

• How much risk do we have?
• If I spend this money, how much less risk will we have?
• Which of our issues is most critical?
• Which of these mitigation approaches is going to be more cost-effective?

Risk Management Insight (RMI) was started to help organizations take advantage of this new approach. Our methods can show you what to measure, how to measure, and how to derive meaning from those measurements.