How to Measure Anything in Cybersecurity Risk

by Douglas W. Hubbard

if decomposition causes you to widen a range, that might be informative if it makes you question the assumptions of your previous range.