How to Measure Anything in Cybersecurity Risk

by Douglas W. Hubbard

And since this uncertainty can change as a result of observations, we treat uncertainty as a feature of the observer, not necessarily the thing being observed.