Risk Quantification
19 essays
- All58
- Risk Quantification19
- Judgment & Decisions15
- Data & Research7
- Security & Tech7
- Metrics & Measurement6
- Security Economics4
2026
2025
2021
- How to write good risk scenarios and statements
- Optimizing Risk Response, Unfiltered
- ISACA’s Risk Response Whitepaper Released
- SIRAcon 2021 Talk | Baby Steps: Easing your company into a quantitative cyber risk program
- The Elephant in the Risk Governance Room
- The Sweet Spot of Risk Governance
- Risk modeling the vulnerability du jour, part 2: Forward-looking risk registers
- Risk modeling the vulnerability du jour, part 1: Framing
2020
2018
2015
Heatmaps to Histograms: Field Notes
It’s a free newsletter for risk and security professionals, and each issue brings a practical CRQ technique, a case study from the field, and a tool or prompt you can use the same day.
Your welcome email includes Chapter 5 of the book, Your First Quantitative Risk Assessment, where you build a Monte Carlo simulation in Excel and run a complete risk analysis, free.
Delivered by Substack. No spam, and you can leave with one click.