Publications
Most of my writing is here as essays or in my Field Notes newsletter. This page lists what I’ve written for other publishers, starting with the book.
From Heatmaps to Histograms: A Practical Guide to Cyber Risk Quantification
It’s a practical guide for anyone who wants to start measuring cyber risk in dollars. Almost half of it is about data: how to collect it, normalize it, blend it, and use AI to make that work faster and better.
Chapters, reports and white papers
Articles and columns
- Black swans, paper tigers, and the future of risk imagination
- Taking Uncertainty Seriously
- How to Write Strong Risk Scenarios and Statements
- The Elephant in the Risk Governance Room
- Using Risk Assessment to Support Decision Making
- The Sweet Spot of Risk Governance
- The Downstream Effects of Cyberextortion
- My contributor column
- Gift Card Fraud: How It’s Committed and Why It’s So Lucrative