How to Measure Anything in Cybersecurity Risk

by Douglas W. Hubbard

For each risk, subjectively assign a range for a monetary loss if such an event occurs as a “90% confidence interval” (CI).