Introduction
Risk Scenarios help you identify and assess potential cyber risks that could impact your organization. Each Risk Scenario defines the asset at risk, the threat, the potential impact, and how likely the event is to occur. SAFE uses the FAIR (Factor Analysis of Information Risk) methodology to calculate and quantify cyber risk.
SAFE includes an Out-of-the-Box (OOTB) Risk Scenario Library with pre-defined Risk Scenarios, allowing you to quickly start assessing risk without creating scenarios from scratch.
Each Risk Scenario generates key risk assessment outputs, including:
Likelihood
Loss Magnitude
Annualized Loss
Risk Scenarios Overview
The Risk Scenarios page provides a centralized view of all Risk Scenarios along with visual insights to help identify and prioritize organizational risk.
The page includes:
Top Risk Scenario Bubble Graph: A visual representation of Risk Scenarios plotted by Likelihood versus Loss Magnitude.
Worst Performing Risk Scenarios: Highlights the Risk Scenarios that require immediate attention.
Best Performing Risk Scenarios: Displays the Risk Scenarios with the lowest overall risk impact.
Risk Scenarios Table: Lists all available Risk Scenarios with support for searching, filtering, grouping, and other management actions.
Managing the Risk Scenario list table
You can group the Risk Scenario table, apply filters, manage columns, search, and export the group list.
Grouping: You can group Risk Scenarios based on:
Category
Risk Scenario Category
Attack Outcome
Threat Actor
Initial Attack Methods
Tags
More Actions
Each Risk Scenario has a three-dot options menu providing the following actions:
Edit: Redirects you to the five-step wizard for updating scenario details.
Duplicate: This creates a duplicate of the Risk Scenario with existing details.
Note on Loss Driver
When you duplicate a Risk Scenario from one group (source) to another (target), only the overridden loss drivers from the source will be copied over. The remaining loss driver values will automatically adjust based on the target group's assessments and revenue.
Delete: Removes the selected Risk Scenario.
Archive: Moves the scenario to archived records.
Rename: Allows renaming the Risk Scenario.
Risk Scenario Details
Clicking on a Risk Scenario opens its detail page, which includes:
AI Summary
Likelihood and Loss Magnitude
MITRE ATT&CK View
Control View
