The scientific-technical basis of the method used is based on Monte Carlo simulations, carried out on a set of statistical variables characterized by a Beta PERT distribution function, which model the technological and operational phenomena involved in security incidents.
These variables are then orchestrated using the Open FAIR standard, with any necessary adjustments introduced by the security controls established by the organization, for which Armatum allows the use of the CIS, ISO 27001, or NIST CSF Control Standards.
In addition to using internationally recognized standards open to public scrutiny, we incorporate other innovations like the Gordon and Loeb’s algorithm for calculating the optimal investment in cybersecurity.