A recent Gartner survey found that 80% of security leaders use the least sophisticated form of Cyber Risk Quantification (CRQ). This form involves manual calculations that lead to biased and error-prone results, limiting its usefulness for senior executives and operational teams.