Fix the Data. Trust the Model. Move Faster.

Behind every successful risk quantification effort is something most people never see: a messy, manual, and often frustrating process of wrangling data, building models, and troubleshooting why they just don’t behave like they should. That’s the reality of risk measurement—and it’s exactly what the “Measurement Tips, Tricks, & Tools” track at SiRAcon ‘25 is here to tackle.

This track isn’t about flashy dashboards or the latest software suite. It’s about the everyday work of making quantification practical, defensible, and trusted. If you've ever thought, “this model looks right, but something feels off,” or spent hours trying to clean a spreadsheet someone exported from an obscure legacy system—this track is for you.

Data Hygiene in the Real World

Before you model anything, you have to trust your data. That’s easier said than done when your inputs come from ticketing systems, config management databases, threat intel feeds, or one-off subject matter expert interviews.

In this session, you'll learn proven methods for:

• Spotting common inconsistencies in real-world cyber risk data

• Creating defensible assumptions when you don’t have a complete dataset

• Validating source quality—and knowing when a source is too noisy to use
  Building workflows that let you revisit and update assumptions without starting from scratch

If garbage in = garbage out, this is how you take out the trash before it corrupts your model.

Troubleshooting Quant Models

“My loss exceedance curve looks weird.” If you’ve ever said that out loud, congratulations—your LEC does in fact look weird, but you’re not alone. Diagnosing why your model output seems “off” takes more than gut instinct, which is what this talk track is about. This session will give you the skills to reverse-engineer your models when the results don’t match expectations.

Some possible topics to explore:

• How to identify hidden bias in your estimates or distributions

• Techniques for sensitivity analysis that highlight which inputs matter most

• Warning signs that your simulation isn't converging—or is overfitting to bad data

• Ways to communicate uncertainty and model limitations without undermining credibility
  
  

It’s not just about making models—it’s about making models that hold up under scrutiny.

Scripting Smarter Simulations

Monte Carlo models are the backbone of modern risk quantification—but building simulations that are fast, flexible, and maintainable is an evolving art.

Sessions in this track might walk through:

• Structuring simulations so they scale and adapt as your data evolves

• Writing modular code in Python, R, and Excel to reduce manual work

• Running multiple what-if scenarios in parallel without rewriting your logic every time

• Avoiding common performance bottlenecks when running large simulations
  
  

If you’re stuck in a spreadsheet swamp, or want to build scripts that do more of the heavy lifting, this will get you there faster.

Shortcuts and Time-Savers

Risk teams are often under-resourced and over-asked—so efficiency isn’t a luxury, it’s a necessity. These sessions are full of “if only I knew this sooner!” kinds of tricks that help you move faster without compromising accuracy or integrity.

Talks in this track aim to address:

• Lightweight ways to automate recurring analysis tasks

• How to templatize your modeling workflow to reduce errors

• Creative ways to repurpose prior assessments and speed up scenario development

• Quick checks you can run to spot red flags before presenting results
  
  

Because the faster you can get to reliable insight, the more time you have to act on it.

Your Quant Practice, Supercharged

The Measurement Tips, Tricks, & Tools track delivers practical knowledge that risk professionals can apply the very next day. It’s for the people doing the work—building models, validating inputs, debugging strange outputs, and constantly evolving their methods to be more credible and more actionable.

When you walk away from these sessions, you won’t just know how to measure risk—you’ll know how to do it better, faster, and with a lot more confidence.

At SiRAcon ‘25, we’re not just pushing boundaries—we’re refining the engine behind the insights that matter.