“Could it happen to us? And how bad could it be? If these questions are on your mind, a good place to start looking for answers is the IRIS 2022 Report from Cyentia. This report analyzes 77,000 publicly disclosed cyber events experienced over a 10-year period by some 35,000 organizations.
Category: Risk Management
All Models are wrong, but some are useful. (George Box) …and some are measurably better than others. (Douglas Hubbard). Such is the premise of the book How to Measure Anything in Cybersecurity Risk, in which Douglas Hubbard and Richard Seiersen take a critical look at conventional methods of assessing Cybersecurity risk, and offer an alternative. A continuation of Hubbard’s series on business statistics and quantitative decision analysis, this book dives deep into the problem of how to inform business decisions in complex situations when data is scarce. While business statistics may not be everyone’s favourite topic, it is a remarkably engaging overview, and it can equally serve as a desk reference for anyone whose work involves helping organizations make informed[…]