1. Scope 2. Exposure 3. Interventions 4. Effects 5. Results

2. Current exposure

Build your library of loss scenarios first, then mark which ones apply to this analysis — keep them mutually exclusive and collectively exhaustive for the scope you defined.

Loss scenarios

No loss scenarios yet — add at least one below.

Add a loss scenario

Scenario name

Description (optional)

Actor(s), action, and impact Actor(s)

External Internal Partner

Action category (VERIS)

Action detail (optional)

Impact(s)

Confidentiality Integrity Availability

Applies to this analysis

Notes / assumptions (optional)

Rate of occurrence

Expected frequency

Confidence

Lower confidence widens the simulated range around your expected frequency.

Cost per loss event

Typical (median)

Severe (95th percentile)

Secondary loss (optional) Probability of secondary loss, given a loss event (%)

Secondary cost — typical

Secondary cost — severe

Duration & records exposed (optional, reported only — not used in the RoI calculation)

Duration typical (days)

Duration severe (days)

Records typical

Records severe

← Back Continue to interventions →