Model your first FAIR scenario — in Power BI, for free.
Most cybersecurity professionals know that qualitative risk assessments don’t cut it anymore.
Executives are asking for real numbers. Audit committees want to know how likely a scenario is — not whether it’s red, yellow, or green. Security teams are trying to prioritize work based on data, not gut feel.
But jumping into quantitative risk modeling feels like a heavy lift.
FAIR sounds promising, but complex.
Most tooling is built for big orgs or big budgets.
Spreadsheets get messy fast.
And even when you do model something, explaining it is half the battle.
We wanted to change that.
Meet the Securemetrics CRQ Community Edition
This free Power BI template lets you model a single FAIR scenario with clarity and structure — no code, no spreadsheets, and no giant SaaS platform required.
It’s built for:
Individuals exploring cyber risk quantification
Teams piloting FAIR
Consultants who want a clean demo or teaching tool
Anyone curious about modeling risk with numbers, not colors
What’s Inside
The Community Edition includes:
Structured Inputs:
Threat Event Frequency (TEF)
Vulnerability
Primary Loss Magnitude
Secondary Event Frequency & Loss
All modeled using BetaPERT distributions or constants.
Built-in Monte Carlo simulation:
10,000 iterations using the open-sourcepyfair
libraryPower BI visuals for:
Loss distributions
Expected loss & percentiles
LEF/LM decomposition
Clean, editable layout
Designed to help you present the results — not just analyze them.
Setup is Simple
All you need is:
Power BI Desktop (free)
Python (3.9+)
The
pyfair
library (pip install pyfair
)Your scenario inputs
That’s it. Open the template, enter your parameters, and simulate.
Licensing
This version is free for personal, internal, and educational use.
If you’re doing client work or internal reporting at scale, we’ve got something better coming soon.
What’s Next: CRQ Pro
The Community Edition is just the beginning. The Pro Edition will support:
Multi-scenario modeling
Comparisons and trend reporting
Export-ready visuals
Commercial use licensing
Why We Built This
Quantitative risk modeling shouldn’t be locked behind paywalls or certification programs. It should be a skill you can learn hands-on — by running real scenarios, seeing real numbers, and experimenting in a real environment.
That’s why we made this free.
If you’ve been curious about FAIR, cyber risk quantification, or what a better risk conversation could look like — this is your starting point.