It is primarily concerned with establishing accurate probabilities for the frequency and magnitude of data loss events.
FAIR complements the other methodologies by providing a way to produce consistent, defensible belief statements about risk.
[2] Although the basic taxonomy and methods have been made available for non-commercial use under a creative commons license, FAIR itself is proprietary.
Using FAIR to analyze someone else's risk for commercial gain (e.g. through consulting or as part of a software application) requires a license from RMI.
The resulting taxonomy describes how the factors combine to drive risk, and establishes a foundation for the rest of the FAIR framework.
[4] For example, customer information provides value through its role in generating revenue for a commercial organization.