The program is based upon Factor Analysis of Information Risk (FAIR), an open and independent information risk analysis methodology. FAIR provides a model for understanding, analyzing, and measuring information risk.