useR! 2024

Risk analysis and management rely on sound statistical methods and Montecarlo simulation. Performing and reporting quantitative risk has become crucial in Cybersecurity, which affects all sectors, including finance. Actually, Cybersecurity risks are included within the “operational risks” in the finance sector. The FAIR methodology has become a standard for cybersecurity risk analysis using PERT and triangular distributions to simulate loss based on experts input. However, other distributions and methods can be used for analysing risks, e.g., lognormal. In this work, we present a shiny app for simulating cybersecurity losses, allowing the user to choose whether to use the FAIR methodology, or modifications to it, such as different probability distributions, or modifications on the FAIR ontology. Statistical analysis of the simulation results are shown by means of interactive tables and plots. A quarto report can be generated automatically. The app is also useful for teaching Risk Analysis in Degree courses on cybersecurity. Future work includes adding more probability distributions, such as extreme value distributions, and publish the app in CRAN as a contributed package.