Description: Because of its complexity, ensuring the security of cyberspace is one of today’s most significant challenges. As the cyber environment becomes more integrated with the real world, the direct impact of cyber security incidents on business is also heightened. This study aims to develop a generic model that can be applied by any organization. For the validation of the developed cyber risk analysis method, simulations and sensitivity analysis will be performed.