How to Measure Anything in Cybersecurity Risk

by Douglas W. Hubbard

What you want to know is whether you have less uncertainty after considering some source of data and whether that reduction in uncertainty warrants some change in actions.