For folks that want to learn more about Risk and Risk Management, I recommend:
https://www.fairinstitute.org/about
Membership for individuals is free and they offer many resources.
This provides an excellent addition to the courses offered by (ISC)2
https://learn.isc2.org/d2l/home/8264
and
https://learn.isc2.org/d2l/home/8609
d
@Steve-Wilme @dcontesti You can also obtain your OpenFair via Open Group certification too officially::
https://www.opengroup.org/certifications/openfair
Risk Quantification is the way to go and acts as an anchor for Zero Trust Security journeys too.
Regards
Caute_Cautim
For those of you who prefer a book on the same theme, I recommend Measuring and Managing Information Risk - A FAIR Approach by Jack Freund and Jack Jones. 2015 ISBN 978-0-12-420231-3 (375 pages).
An excellent resource for those who want to move from a qualitative to a more quantitative approach to risk management and answer some of those searching questions from the C-suite.