Regular price: $24.95

Free with 30-day trial
Membership details Membership details
  • A 30-day trial plus your first audiobook, free
  • 1 credit/month after trial – good for any book, any price
  • Easy exchanges – swap any book you don’t love
  • Keep your audiobooks, even if you cancel
  • After your trial, Audible is just $14.95/month
OR
In Cart

Publisher's Summary

A ground shaking exposé on the failure of popular cyber risk management methods.

How to Measure Anything in Cybersecurity Risk exposes the shortcomings of current "risk management" practices, and offers a series of improvement techniques that help you fill the holes and ramp up security. In his best-selling book How to Measure Anything, author Douglas W. Hubbard opened the business world's eyes to the critical need for better measurement. This book expands upon that premise and draws from The Failure of Risk Management to sound the alarm in the cybersecurity realm. Some of the field's premier risk management approaches actually create more risk than they mitigate, and questionable methods have been duplicated across industries and embedded in the products accepted as gospel. This book sheds light on these blatant risks and provides alternate techniques that can help improve your current situation. You'll also learn which approaches are too risky to save and are actually more damaging than a total lack of any security. Dangerous risk management methods abound; there is no industry more critically in need of solutions than cybersecurity. This book provides solutions where they exist, and advises when to change tracks entirely.

  • Discover the shortcomings of cybersecurity's "best practices"
  • Learn which risk management approaches actually create risk
  • Improve your current practices with practical alterations
  • Learn which methods are beyond saving, and worse than doing nothing

Insightful and enlightening, this book will inspire a closer examination of your company's own risk management practices in the context of cybersecurity. The end goal is airtight data protection, so finding cracks in the vault is a positive thing - as long as you get there before the bad guys do. How to Measure Anything in Cybersecurity Risk is your guide to more robust protection through better quantitative processes, approaches, and techniques.

©2016 John Wiley & Sons, Inc. (P)2016 Audible, Inc.

What members say

Average Customer Ratings

Overall

  • 4.1 out of 5.0
  • 5 Stars
    10
  • 4 Stars
    14
  • 3 Stars
    5
  • 2 Stars
    1
  • 1 Stars
    0

Performance

  • 4.0 out of 5.0
  • 5 Stars
    11
  • 4 Stars
    11
  • 3 Stars
    5
  • 2 Stars
    1
  • 1 Stars
    1

Story

  • 4.0 out of 5.0
  • 5 Stars
    12
  • 4 Stars
    7
  • 3 Stars
    8
  • 2 Stars
    2
  • 1 Stars
    0
Sort by:
  • Overall
  • Performance
  • Story
  • Andy
  • Westport, CT, United States
  • 03-28-17

better know math and statistics before diving in

I found this book enjoyable, but most of the math and statistics were way over my head.
Fortunately, I'm a general manager and I can hire folks to do the good things that this book lays out. Before listening to this book, our cybersecurity matrix was green, yellow, red. Now we can move toward continuous measurement, which makes more sense.

3 of 3 people found this review helpful

  • Overall
  • Performance
  • Story

Not appropriate for audio, buy a hard copy instead

Would you try another book from Douglas W. Hubbard and Richard Seiersen and/or Patrick Cronin?

Yes, it was obvious that they knew their stuff

Any additional comments?

I liked this book, I wish I could return it for a hard copy. This book is well done but really hard to follow as an audio book, which is how I bought it. Audible says I can't return it.

3 of 3 people found this review helpful

  • Overall
  • Performance
  • Story

Technically precise AND presents useful concepts

The author presents precise mathematics applicable to estimating cybersecurity risks, probably useful for enterprise-level cybersecurity managers. For small to medium companies who probably do not have the resources to deploy this level of estimation, the concepts are still helpful as counterpoint to commonly-used nominal- and ordinal-level methods of estimating cybersecurity risks.

  • Overall
  • Performance
  • Story

Would be better without Narrating formulas

Overall this is a great cyber security book, which the field is greatly lacking. I learned a lot, and I would said overall this is worth a listen, if you are high enough up your company/organizations security team. That being said, there is room for improvement and some things to consider for potential listeners:

- I listen to audiobooks exclusively in the car, and therefor cannot reference figures/images from the book. There are a lot of them.

- The authors helpfully reference their parent website for downloadable content, then proceed to verbally narrate excel functions...often 2-3 minutes long. I had to 10-second skip over these more often than I would have liked.

  • Overall
  • Performance
  • Story

Great book to understand Cybersecurity Risk

Cybersecurity risk needs to adopt a quantitative risk metric driven approach. This book will help you understand why and walk you through some of the methods. It has a very applied hands on approach with links to downloadable spreadsheets.

1 of 2 people found this review helpful