How to Measure Anything in Cybersecurity Risk
If you know almost nothing, almost anything will tell you something.
Douglas W. Hubbard • How to Measure Anything: Finding the Value of Intangibles in Business
The truth is that in today’s hyperconnected world, maturity-based cybersecurity programs are no longer adequate for combatting cyberrisks. A more strategic, risk-based approach is imperative for effective and efficient risk management (Exhibit 2).
Jim Boehm • The Risk-Based Approach to Cybersecurity
