How to Measure Anything in Cybersecurity Risk

by Douglas W. Hubbard

Thomas et al. found that any design of a risk matrix had “gross inconsistencies and arbitrariness” embedded within it.