# Excel Model

{% hint style="warning" %}
The CRQ Pro Excel Model requires Python in Excel. The model does NOT require the paid version (known as the add-in). The standard version included in all M365 subscriptions is sufficient.&#x20;
{% endhint %}

<figure><img src="https://2758327828-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FdiZHZ8Scmv2PQlOmciJZ%2Fuploads%2FRPVhaNdjYzT3o9dgHdHg%2FCRQ%20Pro%20Excel%20Model.png?alt=media&#x26;token=6e0d38bf-2da2-4e46-8ca2-cc2765065970" alt=""><figcaption></figcaption></figure>

## Locked Sheets

{% hint style="info" %}
There is no password on the locked sheets and workbook
{% endhint %}

The CRQ Pro Excel Model's workbook structure and sheets are locked to minimize the liklihood of introducing errors when loading into PowerBI. The PowerBI reporting requires specific output structures.&#x20;

This is not to lock you out of editing or reviewing these sheets. You can unlock the sheets, but please note that changing the output or input structure can break both the Python code and PowerBI reporting.&#x20;

## Workbook Structure

| Sheet Name      | Purpose                                                              | Hidden |
| --------------- | -------------------------------------------------------------------- | ------ |
| Model           | Model input including scenario information and FAIR model variables  |        |
| Output          | Quick statistical output to quickly validate model inputs            |        |
| Results         | Python code that runs Monte Carlo simulations                        | ✅      |
| LEC             | Python code that generates exceedence curve data                     | ✅      |
| Statistics      | Python code that generates statistical measure table                 | ✅      |
| Statistics Flat | Python code that generates statistical measures in single row format | ✅      |
| Notes           | Structured output for notes and assumptions                          | ✅      |

## Model Sheet

The model sheet is where you will enter your model inputs and meta data. The cells requiring data input are highlighted in blue:

| Input                          | Description                                                                                             | Example                         | Required |
| ------------------------------ | ------------------------------------------------------------------------------------------------------- | ------------------------------- | -------- |
| Scenario                       | Name/description of the risk scenario being modeled                                                     | Inappropriate access privileges |          |
| Analyst                        | Name, email, or other identifier of the analyst                                                         | Mitchell Telatnik               |          |
| Date                           | Date the model was performed                                                                            | 01/01/2025                      |          |
| Model Name                     | Name of the model. This acts as a unique identifier. Recommended to use an organization-defined schema. | Model-01                        |          |
| Asset at Risk                  |                                                                                                         | Customer PII                    |          |
| Threat Community               |                                                                                                         | Cyber criminals                 |          |
| Threat Type                    |                                                                                                         | Malicious                       |          |
| Effect                         |                                                                                                         | Confidentiality                 |          |
| Threat Event Frequency         |                                                                                                         | 0.5 ; 15                        | ✅        |
| Vulnerability                  |                                                                                                         | 5%                              | ✅        |
| Secondary Loss Event Frequency |                                                                                                         | 80%                             | ✅        |
| Loss Magnitude Variables       |                                                                                                         | 20,000                          | ✅        |


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.securemetrics.io/cyber-risk-quantification-crq-pro/excel-model.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
