1. Enter the number of incidents
Use the count of discovery events or issues included in the scenario.
2. Set an amount per incident
Enter the financial amount you want to model for each event.
3. Enter the scenario probability
Use the internal probability assumption selected for planning.
4. Reflect mitigation
Enter a percentage reduction for controls or other mitigating factors you have separately assessed.
5. Add expected response cost
Include remediation, forensic, motion, vendor, or defense cost that should be added to the scenario.
6. Review the modeled exposure
Compare gross and risk-adjusted figures, and run alternative cases for uncertainty.