Measuring and Managing Information Risk Quotes

“Your goal in risk analysis should always be to make sure that whatever the decision is, you have done your best to keep the decision maker well-informed about the probabilities of different outcomes.”
― Jack Freund, Measuring and Managing Information Risk: A FAIR Approach

“The TCap Continuum is simply a percentile scale from 1 to 100, which represents the comprehensive range of capabilities for a population of threat agents.”
― Jack Freund, Measuring and Managing Information Risk: A FAIR Approach

“How much credibility would the physics profession have if practitioners could not agree on foundational terms like mass, weight, and velocity? As silly as that may seem, the risk profession struggles with foundational terminology on this profound a scale. As long as this is true, the profession will struggle to mature.”
― Jack Freund, Measuring and Managing Information Risk: A FAIR Approach

“Risk analysis is never perfect. The fact is, all risk analysis models are approximations of reality because reality is far too complex to ever model exactly.”
― Jack Freund, Measuring and Managing Information Risk: A FAIR Approach