What is Value At Risk (VaR)?

A Model that empowers a decision maker to understand more clearly important things: what threats the product or solution is attempting to mitigate; how often those threats appear on the organization’s landscape; and, the current capability of their organization to recognize, respond to, and mitigate the threats


https://www.infosecurity-magazine.com/opinions/real-security-question