ThreatConnect RQ is the only data-driven, automated cyber risk quantification product that prioritizes security initiatives by their financial risk reduction. RQ leverages industry data (loss and technical) and combines that with a company's attack surface and business assets to deliver highly defensible, data-driven outputs that power strategic and tactical decision-making. RQ uses a number of models for computing loss including FAIR as well as statistical, regression, and machine learning models. RQ uses attack surface information - including CVE scans, Control assessments, and external 3rd party scans - to compute the likelihood of an attacker beating a company's defenses.