Tag Archives: Douglas Hubbard

Cybersecurity Risk Metrics … Why Don’t They Get It?

April 17, 2017 – 6:00 am – The problem with cybersecurity is the metrics that are used to assess and manage security risks. In November 2008, I published an article “Accounting for Value and Uncertainty in Security Metrics,” in ISACA Journal, which subsequently won the 2009 Michael P. Cangemi Best Book/Best Article…
By | Posted in General, Risk Analysis, Security Metrics | Also tagged , , , , , , | Comments (0)

Risk Mismanagement – Scoring vs. Monte Carlo vs. Scoring

September 12, 2011 – 6:00 am – I finally got to read Douglas Hubbard’s book “The Failure of Risk Management: Why It’s Broken and How to Fix It” (Wiley, 2009). As I have written in other columns about Hubbard’s prior book “How to Measure Anything: Finding the Value of Intangibles in Business” (Wiley, 2007; Second…
By | Posted in CSO/CISO Perspectives, Human Elements, Risk Analysis | Also tagged , , , , , , , , , , , | Comments (4)