Guideline
Quantitative Risk Analysis Guideline
This guideline provides voluntary guidance for applying quantitative risk analysis techniques alongside the qualitative 5×5 matrix approach defined in risk/procedure-risk-assessment-methodology.md. Quantitative methods complement qualitative scoring by expressing risk in financial terms, supporting capital allocation decisions, cyber insurance sizing, and Board-level risk reporting.
- Type
- Guideline
- Version
- 1.0.11
- Date
- 2026-10-24
- Owner
- Chief Risk Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Risk Management: Quantitative Analysis
- Review frequency
- Annual and upon material methodology update
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- When to use quantitative analysis
- FAIR model overview
- Estimating ranges (monte carlo approach)
- Step-by-step quantitative analysis process
- Data sources for estimation
- Cyber insurance integration
- Limitations
Related documents
- risk/
README.md (opens in a new tab) source - Enterprise Risk Management Standardrisk
- Risk Assessment Methodology Procedurerisk
- Enterprise Risk Register Templaterisk
- Risk Appetite Statement Templaterisk
- Enterprise Governance and Risk Management Policyrisk
Next
All Documents