6 Truths of Cyber Risk Quantification
FAIR (Factor Analysis of Information Risk) FAIR is a quantitative risk framework.
Jordan Genung • CCISO Certified Chief Information Security Officer All-in-One Exam Guide
It is important to clearly communicate to the target audience which items on the list are threats, assets and controls (however weak they may be). Executives must understand how the combination of these categories of things can be manipulated to cause harm to the enterprise.
ISACA • Home / Resources / ISACA Journal / Issues / 2020 / Volume 3 / Communicating Technology Risk to Nontechnical People
On Process Analysis for Risk Functions
Aashay Sanghvi • B2B and Enterprise Product Ideas - January 2020
model of decision risk (Chapter 6)
Douglas W. Hubbard • How to Measure Anything
What's important in "AI for epistemics"? — EA Forum
forum.effectivealtruism.org