Risk Analysis and Worst-Case Thinking There is no value in ignoring uncertainty in cyber risk analysis. Instead, we need to look at the different ways of dealing with it. Read More
Second Thoughts on Secondary Loss in FAIR. What Are Your Thoughts? Using Secondary Loss in the FAIR model to estimate costs from credit monitoring and other knock-on effects of data breach or other cyber events. Read More
13 Reasons Why Heat Maps Must Die Read this and you'll be ready to switch from qualitative risk analysis to cyber risk quantification. Read More
Warren Buffet's Information Security Advice Lessons on critical thinking–and avoiding emotion--for cybersecurity and risk management analysts from a master investor – and the FAIR risk model. Read More
