How to Measure Anything in Cybersecurity Risk

by Douglas W. Hubbard

Clarification Chain If it matters at all, it is detectable/observable. If it is detectable, it can be detected as an amount (or range of possible amounts). If it can be detected as a range of possible amounts, it can be measured.