How to Measure Anything in Cybersecurity Risk by Douglas W. Hubbard

' Jason Chan, Former VP Information Security Netflix This book enables the reader to confidently move forward in a cybersecurity landscape that grows in complexity daily.

To address this complexity and variability, we need the knowledge, mechanisms, and means to accurately prioritize initiatives, measure risk, and evaluate proposed solutions. 'Cybersecurity practitioners are overloaded with new threats, new vulnerabilities, new tools, and with constant pressure to keep pace with their organizations’ ever changing needs. These tools will empower leaders to build organizational cybersecurity resilience against an ever-changing cyber risk landscape.' Vishaal 'V8' Hariprasad, CEO, Resilience and Former Active Duty Cyber Effects Operations Officer, US Air Force This book arms the CISO of the future with the tools needed to make business relevant decisions. But in order to smartly manage it, CISOs must first quantify their risk. 'Companies can mitigate, transfer, or ignore their cyber risk. ' Gerhard Eschelbeck, Former CISO at Google I recommend anyone looking for a scientific approach for measuring cybersecurity risk to take advantage of Doug Hubbard and Richard Seiersen's expertise on this topic. It provides not only concepts but an essential roadmap for measuring risk, developing metrics, and determining return on investment.

This book is equally valuable for technical security practitioners, risk and compliance professionals as well as security leaders. 'How to Measure Anything in Cybersecurity Risk makes a strong case for quantifying what organizations are up against. I consider it mandatory reading for our field.” John “Four” Flynn, CISO, Amazon Stores “Whether you are a quantified risk skeptic or fan, this book will teach you new ways to think about the problem. It's a practical guide to improving risk assessment with a straightforward and simple framework. In the book, the authors demonstrate how to quantify uncertainty and shed light on how to measure seemingly intangible goals.

In the newly revised How to Measure Anything in Cybersecurity Risk, Second Edition, a pioneering information security professional and a leader in quantitative analysis methods delivers yet another eye-opening text applying the quantitative language of risk analysis to cybersecurity.

How to Measure Anything in Cybersecurity Risk by Douglas W. Hubbard