I've got 15+ years of experience in cyber risk management, compliance and IT internal audit. Most of my code is supporting my work or learning in these areas.
cyber-incident-mcmc-pymc. Code that implements Factor Analysis of Information Risk (FAIR) in combination with MITRE ATT&CK using Markov Chain Monte Carlo (via PyMC) to determine the frequency of successful attacks.
46cyber-incident-mcmc-cmdstanr. Code that implements Factor Analysis of Information Risk (FAIR) in combination with MITRE ATT&CK using Markov Chain Monte Carlo (via cmdstanr) to determine the frequency of successful attacks.
6r-fair-risk-pert. Simple code written in R to calculate risk using the factor analysis of information risk (FAIR) methodology. Uses PERT distributions for the monte carlo simulations.
5