How to Measure Anything in Cybersecurity Risk

by Douglas W. Hubbard

Remember, if the primary concern about using probabilistic methods is the lack of data, then you also lack the data to use nonquantitative methods.