Includes bibliographical references and index.

Part I: why cybersecurity needs better measurements for risk. The one patch most needed in cybersecurity ; A measurement primer for cybersecurity ; The rapid risk audit: starting with a simple quantitative risk model ; The single most important measurement in cybersecurity ; Risk matrices, lie factors, misconceptions, and other obstacles to measuring risk -- Part II: evolving the model of cybersecurity risk. Decompose it: unpacking the details ; Calibrated estimates: how much do you know now? ; Reducing uncertainty with Bayesian methods ; Some powerful methods based on Bayes -- Part III: cybersecurity risk management for the enterprise. Toward security metrics maturity ; How well are my security investments working together? ; A call to action: how to roll out cybersecurity risk management.

"Cybersecurity has become one of the biggest risks facing companies today. There is a need to provide the tools and information for a CISO to become more of a chief information risk officer so they are better able to identify and prioritize risk, allocate resources, and develop effective risk mitigation strategies. This book helps to fill that need"-- Provided by publisher.