How to Measure Anything in Cybersecurity Risk
| Author | : | |
| Rating | : | 4.59 (734 Votes) |
| Asin | : | 1119085292 |
| Format Type | : | paperback |
| Number of Pages | : | 304 Pages |
| Publish Date | : | 2013-08-10 |
| Language | : | English |
DESCRIPTION:
The end goal is airtight data protection, so finding cracks in the vault is a positive thing—as long as you get there before the bad guys do. This book provides solutions where they exist, and advises when to change tracks entirely.Discover the shortcomings of cybersecurity's "best practices"Learn which risk management approaches actually create riskImprove your current practices with practical alterationsLearn which methods are beyond saving, and worse than doing nothingInsightful and enlightening, this book will inspire a closer e
This complete resource gets you there start to finish by: Debunking the most common arguments against using quantitative methods in cybersecurityModeling risk with a variety of simple and advanced techniques for enhancing the usefulness of data in times of great uncertainty using free, downloadable spreadsheetsDetailing a dependable, organization-wide security metrics maturity model for continuous and measurable improvementThe thought process that goes into making informed decisions with sparse data points, using the described "Lens" method to reduce estimation errors, along with the many other techniques inside, will advance how you run cybersecurity as well as how you measurably improve other types of high-stakes decisions. Immediately useful, this practical guide offers an easy path to better risk assessment by describing a very simple quantitative solution, building on it with more advanced methods, and providing detailed advice for choo
. DOUGLAS W. He has more than twenty years of experience in such areas as cybersecurity; governance, risk and compliance (GRC); and analytics. HUBBARD is the inventor of Applied Information Economics (AIE), an internationally recognized expert in measurement and quantitative decision analysis, and best-selling author of How to Measure Anything, Third Edition, and The Failure of Risk Management.RICHARD SEIERSEN is general manag
Richard Johnson said Required for risk management pros. Absolutely essential for participants in any risk management program who want to get beyond faking things up with Required for risk management pros Absolutely essential for participants in any risk management program who want to get beyond faking things up with 3 level matrices. Quantitative risk analysis requires accuracy, but not absolute precision. This book gives great practical examples and training. level matrices. Quantitative risk analysis requires accuracy, but not absolute precision. This book gives great practical examples and training. RandyB said Great Read - a must for cybersecurity professionals.. Outstanding book. Walks you through going from qualitative assessments to applying quantitative rigor to cyber risk assessments. These methods (shown) brings cyber risk assessment and management more into conformance with standard risk management practices.. My favorite part is the discussion on Los Exceedance Curves J. Freund This book is a must-read for anyone trying to understand priority in Cyber Security operations. The authors take you through the basics of measurement, how risk has been misapplied in the cyber security industry, and makes recommendations for how to improve r