Cybersecurity Risk Quantification in Excel

What you'll build

What you will be able to do

Each lab ends with a concrete result that you build yourself and the checker confirms, cell by cell.

• Turn eight threat scenarios of Kestrel Freight into dollars: single loss expectancy, annualized rate of occurrence and annualized loss expectancy.
• Test six proposed security controls for Kestrel Freight: how much loss each one removes, what it costs, and which ones pay for themselves.
• Score ten risks from Kestrel Freight's risk workshop on a 5 × 5 matrix, give each a heat level with IFS and build the heat map with COUNTIFS.
• Rank Kestrel Freight's twelve register risks by ALE, flag the top five for next year's budget and show how much of the exposure they cover.
• Turn the minimum, most likely and maximum loss estimates of six scenarios into a PERT mean, a standard deviation and a high case, and add up the expected annual loss.
• Classify Kestrel Freight's twelve open vulnerabilities by score, measure how many working days each has been open and count the overdue Critical and High findings.
• Compare Kestrel Freight's January and July phishing simulations by department: click rates, improvement in percentage points, report rates and the company-wide click rate.
• Turn the timestamps of Kestrel Freight's ten Q3 security incidents into hours to detect and to resolve, then report MTTR and the share resolved within the 24-hour target.