How soon will I receive access and for how long may I use the tool?
The FAIR Institute will approve and setup new users on FAIR-U for Cyber within two (2) business days (USA timezones) or sooner. Approved users will have access to the tool indefinitely; we will communicate any access changes to active users via email. User accounts will be automatically disabled after 90 days after the last login; the user's data will be permanently deleted at that time. Any user who wishes to have their account disabled and data deleted prior to 90 days of inactivity should email us at fairu@fairinstitute.org from the email address used to create the account.
Can I use FAIR-U for Cyber to support risk analysis for my business or my clients?
No, FAIR-U for Cyber is intended to be a tool for learners only. It is neither designed nor warranted to support an organization's cyber risk management. Users should not put real-world data into FAIR-U for Cyber. Any and all data for each user will be irrevocably deleted after 90 days of inactivity and may be deleted at any other time without notice.
Is this a shared instance (tenant) of the SAFE One platform?
Yes, the tenant for FAIR-U for Cyber is shared among all FAIR-U for Cyber users. However, users will only see the Enterprise-level risk scenarios and other data that's created by the FAIR Institute team. Your own risk scenarios and data will be viewable only by you and system administrators (FAIR Institute staff and a limited number of Safe Security employees).
Can I upload my own data, such as assets or vulnerability assessment data, into FAIR-U for Cyber?
No, this instance of SAFE One does not allow users to upload sensitive data such as assets, vulnerability assessment findings, user lists, or other sensitive datasets. Users can upload control assessment results (via a CSV-formatted file) to show how they are used by FAIR-CAM to evaluate the impact of controls on risk. Learners should avoid including any identifiable data in any assessment results they upload.
What happened to the original FAIR-U powered by RiskLens?
The original FAIR-U tool has reached its end of life and is no longer available. To provide an experience for non-cybersecurity learners, the FAIR Institute is developing a FAIR analysis spreadsheet that will provide many of the features of the original FAIR-U but with the advantage of being more transparent to FAIR learners. With the FAIR-U spreadsheet, learners will be able to see the formulas behind FAIR and better understand its mathematics. The FAIR-U spreadsheet will be offered sometime in the first half of 2025.
How do I provide feedback on this beta version of FAIR-U for Cyber?
We welcome questions and feedback. To reach us, please email us at fairu@fairinstitute.org. The FAIR Institute will consolidate all feedback for Safe Security. We will do our best to respond to questions within two (2) business days of receiving your email.
Does FAIR-U for Cyber provide access to all features, functions, and capabilities of the SAFE One platform?
No, to simplify the experience for learners, FAIR-U does not provide access to many features, functions and capabilities of SAFE One. For example, learners are not able to perform third-party risk assessments or view the Threat Center tab of SAFE One. We will consider providing access to additional features over time. Learners interested in understanding more of the capabilities of the SAFE One platform should contact Safe Security for a demo.
