Case Study: Media Company reduces web application attack risk with RiskLens

Reducing Web Application Attack Risk with RiskLens

Media Company worked with RiskLens to perform a quantitative cyber risk assessment of its exposure to a web application attack targeting customer PII in an internal database. The company needed help deciding between multiple mitigation options, including migrating the application server or data to a more secure internal environment or moving the PII to the cloud.

Using the RiskLens Cyber Risk Quantification (CRQ) platform and FAIR methodology, RiskLens modeled the current loss exposure and ran “what-if” scenarios for each control investment. The analysis showed an average annualized loss exposure of $13 million in the current state, reduced to $7.9 million with internal migration and to $2.1 million with cloud migration and stale data purging, helping the company make a defensible, risk-based investment decision.