How to Measure Anything in Cybersecurity Risk

Not appropriate for audio, buy a hard copy instead

Would you try another book from Douglas W. Hubbard and Richard Seiersen and/or Patrick Cronin?

Yes, it was obvious that they knew their stuff

Any additional comments?

I liked this book, I wish I could return it for a hard copy. This book is well done but really hard to follow as an audio book, which is how I bought it. Audible says I can't return it.

6 sur 6 personne(s) ont trouvé cet avis utile.

better know math and statistics before diving in

I found this book enjoyable, but most of the math and statistics were way over my head.
Fortunately, I'm a general manager and I can hire folks to do the good things that this book lays out. Before listening to this book, our cybersecurity matrix was green, yellow, red. Now we can move toward continuous measurement, which makes more sense.

4 sur 4 personne(s) ont trouvé cet avis utile.

Umm...not for audio

Great subject matter. Good read. Terrible book for audio. Need the hardcopy, otherwise just useless.

1 sur 1 personne(s) ont trouvé cet avis utile.

Great book to understand Cybersecurity Risk

Cybersecurity risk needs to adopt a quantitative risk metric driven approach. This book will help you understand why and walk you through some of the methods. It has a very applied hands on approach with links to downloadable spreadsheets.

2 sur 3 personne(s) ont trouvé cet avis utile.

Great content; not a great 'Audible' book.

I picked up this book as I'm looking for alternative methodologies to asses third party cyber-risk, and more importantly, something that didn't rely on 'gut feeling.' This book validated my beliefs, with evidence, that ordinal (heatmaps, high/medium/low) scales are not appropriate for serious decisions. It goes to great lengths to show that statistical modeling, while more challenging to perform, is within the bounds of most security experts. The book even directs to downloadable spreadsheets to help solidify the information to the listener.

While I enjoyed the content, my challenge was that I was listening to it, via 'Audible', during my commute. The reader makes several references to undescribed tables and charts. Also, listening to someone read excel spreadsheet formulas and programmatic code makes it difficult to keep up. For example, the simple 'if/then' excel formula "=IF(A1="Test",TRUE,FALSE)", would be read "equals, if, open parenthesis, A1, equals, open quotation, test, close quotation, comma, true, comma, false, close parenthesis."

While the content is valuable, without seeing the examples, I didn't retain very much information. I am planning on purchasing the paper version of the book as the information is valuable, but I don't recommend the 'Audible' version except as a secondary source of study.

Not good at all for an Audio book

If you like the content, buy the hard copy. It is wast of money to buy this as an audiobook. After the first chapter that is very general then the rest is not understandable as an audiobook.

Masterful book, not ideal for audio

This book is an absolute must read for anyone responsible for cybersecurity risk. Hubbard makes complex concepts clear and understandable. I already had a copy on my Kindle and added the audio book so I could listen during my commute. I'm glad I did but found that I skipped through some parts that relied on a good look at the page. Formulas for statistical and probability calculations don't lend themselves to narration and I rely on the written copy for that. Nearly all of the audio book was captivating but for the few parts that have to be read, I'd suggest that another copy is needed to fully appreciate it.

Not for Audible

This book is not really suited for Audible. Listening to the narrator say excel formulae is not really great. I think the authors do have some good information, so the book is worth reading. BUY the physical or kindle book rather.

Amazon should consider an option to allow users to exchange an Audible book for a real version in this scenario.

Great book

This was a great book to help put a lot of things into perspective for measuring risk. As someone who only listens to audio books while driving in the car, the math heavy chapters where of slightly less value as an audio book. That said, the content was solid enough that I will most likely be purchasing this book on Kindle to read again and make more use of the actual math side of it.

Informative

the data presented is relevant,but the lack of graphics makes keeping up difficult for someone not familiar with statistics and risk Management.