How to measure anything in cybersecurity risk

• Verfasst von: Hubbard, Douglas W. [VerfasserIn]
• Verfasst von: Seiersen, Richard [VerfasserIn]
• Titel: How to measure anything in cybersecurity risk
• Mitwirkende: Seybert, Jim [ErzählerIn]
• Verf.angabe: Douglas W. Hubbard, Richard Seiersen
• Ausgabe: [First edition].
• Verlagsort: [Place of publication not identified]
• Verlag: Ascent Audio
• Jahr: 2023
• Umfang: 1 online resource (1 audio file (14 hr., 4 min.))
• Fussnoten: Online resource; title from title details screen (O'Reilly, viewed May 23, 2023)
• ISBN: 978-1-6637-2669-8
• ISBN: 1-6637-2669-8
• Datenträger: Online-Ressource
• Sprache: eng
• Sach-SW: Audiobooks
• K10plus-PPN: 1846838282
• K10plus-PPN:
  Universitätsbibliothek
• Lokale URL UB: Zum Volltext
• Lokale URL UB: Bibliothek der Medizinischen Fakultät Mannheim der Universität Heidelberg
• Bibliothek/Idn: UW / m4326707607
• Lokale URL Inst.: Zum Volltext

Abstract

In How to Measure Anything in Cybersecurity Risk, Second Edition, a pioneering information security professional and a leader in quantitative analysis methods deliver yet another eye-opening text applying the quantitative language of risk analysis to cybersecurity. In the book, the authors demonstrate how to quantify uncertainty and shed light on how to measure seemingly intangible goals. It's a practical guide to improving risk assessment with a straightforward and simple framework. Advanced methods and detailed advice for a variety of use cases round out the book, which also includes: - A new "Rapid Risk Audit" for a first quick quantitative risk assessment - New research on the real impact of reputation damage - New Bayesian examples for assessing risk with little data - New material on simple measurement and estimation, pseudo-random number generators, and advice on combining expert opinion Dispelling long-held beliefs and myths about information security, How to Measure Anything in Cybersecurity Risk is an essential roadmap for IT security managers, CFOs, risk and compliance professionals, and even statisticians looking for novel new ways to apply quantitative techniques to cybersecurity