FAIR (Factor Analysis of Information Risk) is a quantitative risk analysis model that helps organizations assess cyber risks specific to their environment. The impact of these risks is translated into a mathematical risk estimate in dollars by analyzing scoped risk scenarios and aggregating these scenarios to understand potential loss exposure.