How to Measure Anything in Cybersecurity Risk

by Douglas W. Hubbard

Descriptive Analytics: The majority of analytics out there are descriptive. They are just basic aggregates like sums and averages against certain groups of interest like month-over-month burn up and burn down of certain classes of risk.