The Factor Analysis of Information Risk (FAIR) methodology has changed the way cyber experts think and speak about risk in a threat environment where they are faced with uncertainty daily. At the most recent meeting of the San Francisco Bay Area Chapter of the FAIR Institute, a group of local practitioners, analysts and C-level executives gathered for a panel discussion with one common goal — to understand how to better evaluate the cyber risks their organizations are faced with and deliver meaningful and actionable reporting on these risks.

This article summarizes the expertise shared during that panel discussion.