How Kovrr's Cyber Risk Quantification Model Works
A quantified cyber risk figure arrives as a single number, and the first thing a board member, a regulator, an auditor or an actuary wants is the route back to whatever produced it. Most vendors answer that request with documentation about method. Documentation and evidence are different things. Somebody checking a figure needs to reach the records underneath it, the way an auditor works from a financial statement into the accounts and then into individual transactions.
