From Heatmaps to Histograms: A Practical Guide to Cyber Risk Quantification

Appendix B: Six Forms of Loss—Detailed Reference Guide

This appendix provides comprehensive measurement frameworks, calculation methods, and guidance on data sources for each of the six FAIR loss forms. Use this as a reference when building detailed risk assessments or creating magnitude estimates for specific scenarios.

Important Note on Cost Estimates: This appendix teaches you how to measure each loss form, not what the answer should be. No dollar ranges are provided because costs vary significantly by organization size, industry, geography, and time. Instead, you’ll learn the calculation frameworks and where to find current, validated data for your specific context.

1. Productivity Loss

Core Calculation Framework

Basic Formula: Average fully loaded ...