How to Measure Anything in Cybersecurity Risk

by Douglas W. Hubbard

For all practical decision-making purposes, we need to treat measurement as observations that quantitatively reduce uncertainty.