cyber-risk-quantification

FAIR cyber risk quantification toolkits by Laura Voicu: agent-based control simulation (FAIR-CAM), threat event frequency estimator (PyPI), LLM classification validator (PyPI), Monte Carlo risk engine with IRIS benchmarks.

A digital transformation of cyber assessment and authorization data with a relational schema

A FAIR risk quantification engine that translates cyber threats into defensible financial metrics (ALE) using Monte Carlo simulations.

Susan Shepard portfolio: GRC engineering, FAIR cyber risk quantification, AI-driven security automation, and continuous control monitoring.

Open AI Security Posture Management for AI agent discovery, MCP security, attack-path analysis, AI-BOM, OWASP Agentic security, and cyber risk quantification.

Independent Agent Control Standard conformance testing, AI agent runtime security benchmark, adversarial side-effect validation, AgBOM, OpenTelemetry, and control economics.

Cybersecurity risk assessment portfolio project covering asset identification, inherent and residual risk, control analysis, risk treatment, cost-benefit analysis, and executive reporting.

FAIR-style cyber risk quantification in R: Monte Carlo annual loss, loss exceedance curves, control ROI and Bayesian MCMC incident rates

Top Cyber Risk Quantification 🌟 Star if you like it! 🌟

Continuous AI assurance cases, governance evidence graphs, EU AI Act evidence support, ISO 42001, NIST AI RMF, OSCAL, in-toto attestations, and cyber risk economics.

Open-source AI continuous compliance, GRC automation, evidence reliability, control SLOs, audit readiness, and revenue assurance platform

AI-powered cyber risk quantification (Open FAIR v3.0) and 0-1 Knapsack MILP capital allocation platform for enterprise FinTech & statutory compliance (RBI/SEBI).

Open-source FAIR Monte Carlo cyber risk model in Python. Ransomware, cloud breach, AI misuse scenarios. Jupyter notebooks + Streamlit.

Open-source AI GRC automation benchmark for compliance evidence, agentic AI governance, cyber risk quantification, framework mapping, and unit economics

Balbix — independent third-party profile of a public API surface, by API Evangelist. Balbix is a cyber risk and exposure management platform founded in 2015 in San Jose, California. The Balbix Security Cloud (Balbix D3) ingests telemetry from 70+ security and IT systems through pre-built connectors and sensors, unifies it into a single asset, appli

Agentic AI GRC automation, cyber risk quantification, 150+ framework cross-mapping, evidence qualification, board decision packs and revenue enablement economics.