How to Measure Anything in Cybersecurity Risk

by Douglas W. Hubbard

Looking at each bound alone as a separate binary question of “Are you 95% sure it is over/under this amount?”