Case Study: Fortune 100 Performs reduces data-at-rest risk with RiskLens encryption cost-benefit analysis

Fortune 100 Performs Cost/Benefit Analysis of Implementing Encryption of Data at Rest

Fortune 100 Performs worked with RiskLens to evaluate whether implementing encryption-at-rest would meaningfully reduce risk for systems storing sensitive customer and employee data, including PII and potentially card data. The company needed a business-driven cost/benefit analysis to decide which encryption projects should be prioritized and where encryption would not be justified.

Using RiskLens and the FAIR model, RiskLens compared unencrypted versus encrypted data-at-rest scenarios and quantified the reduction in annualized loss exposure. The analysis showed risk reductions ranging from $48,000 for 10K records to $2.979 million for 10M records on average, with maximum modeled reductions as high as $12.515 million, helping the CISO prioritize next-year encryption efforts and remove smaller systems with weak ROI from the project list.