The spreadsheet from ISECOM is/was "the standard way" to calculate a RAV. Why another
approach? Because that spreadsheet, like everything else around the OSSTMM, is not maintained. Also, the
sheet is password-protected, some formulas are using CONSTANT_C which is not documented or visible and
contains an "invented unit of measurement".
For further details about the calculation, check the section "4.4 The Operational Security Formula" of the OSSTMM 3.
Download the the index.html file or clone the repo, then open index.html in your browser.
The alternative is to use https://fabaff.github.io/rav-calculator/