Armed with subsequent agreements with Richmond, Virginia-based Risk Based Security Inc. and its database of 16,000 cyber incidents and Cambridge, Massachusetts-based BitSight Technologies and its security performance measurement technology, AIR used the “information to give our modeling a real-time view of the risk” and “help calibrate the relative vulnerabilities between certain types of risk,” he said.