risk-quantification

A collection of awesome projects, blog posts, books, and talks on quantifying risk

Interactive CRQ Monte Carlo simulation tool for quantifying cybersecurity risk using FAIR methodology. Built for EU SMBs, vCISOs, and security practitioners.

FAIR cyber risk quantification toolkits, agent-based control simulation (FAIR-CAM), threat event frequency estimator (PyPI), LLM classification validator (PyPI), Monte Carlo risk engine with IRIS benchmarks.

Reusable decision-science utilities for security: Monte Carlo, Bayes, Survival, VoI, light causal helpers.

Evidence-governed quantitative cyber risk — a trustworthy CLI and scenario engine where every number traces to a reviewed public source.

Bayesian risk modelling and quantification notebooks for cybersecurity

Cybersecurity risk intelligence dashboard analyzing CVE vulnerabilities, CVSS risk scores, and financial exposure using Power BI.

Local-first quantitative cyber risk platform built on the FAIR methodology: Monte Carlo simulation, portfolio aggregation, and executive reporting. No cloud, no telemetry. (Beta)

Interactive loss exceedance curve guide, restyled to my portfolio palette

Interactive Monte Carlo demo: watch the law of large numbers converge on a fair coin. A training exercise.

Interactive risk quantifier: place risks on a 5x5 heat map, add frequency and loss ranges, then run 10,000 Monte Carlo iterations to turn the matrix into a loss distribution.

Interactive FAIR taxonomy study tool: build the decomposition tree from memory, assign units, match definitions. A training exercise.

Control-centric GRC platform prototype: controls are the source of truth, with assets, frameworks, evidence, risks, integrations, and AI agent decisions mapped around each one. React/Vite UI, SQLite/Lambda API, and a 10,000-trial FAIR Monte Carlo risk engine.

Threat modeling case study applying PASTA (7-stage) and FAIR (Monte Carlo) to quantify ransomware risk in a HIPAA-regulated SaaS environment. Includes control investment ROI analysis and presentation talking points.

Bayesian-inspired Impact Forecast Algorithm (IFA) for quantifying material impact risk

Cyber risk analysis, offline in a single HTML file — EBIOS RM threat modeling, MITRE ATT&CK kill chains, and Monte-Carlo risk quantification. Open-source companion to Aurelian Risk Manager.

Open-source data breach cost predictor & cyber-risk quantification engine — IBM benchmarks + DPDP/GDPR penalties + Monte Carlo + security-investment ROI

An AI risk register that produces loss exposure ranges instead of heat-map colours: twelve seeded scenarios, Monte Carlo aggregation, and live coverage mapping against NIST AI RMF 1.0 and ISO/IEC 42001 Annex A.

GitHub profile README: GRC engineering, FAIR cyber risk quantification, compliance-as-code, and AI-assisted GRC.

19 interactive Jupyter notebooks for statistical decision-making in security: Monte Carlo, Bayesian, survival analysis, causal inference, FAIR.