cover of episode How to Measure Anything in Cybersecurity Risk Audiobook by Douglas W. Hubbard, Richard Seiersen

How to Measure Anything in Cybersecurity Risk Audiobook by Douglas W. Hubbard, Richard Seiersen

2016/11/29
logo of podcast Discover the New Releases Audiobooks in Science & Technology, Technology

Discover the New Releases Audiobooks in Science & Technology, Technology

Shownotes Transcript

Please open https://hotaudiobook.com ONLY on your standard browser Safari, Chrome, Microsoft or Firefox to download full audiobooks of your choice for free.

Title: How to Measure Anything in Cybersecurity Risk Author: Douglas W. Hubbard, Richard Seiersen Narrator: Patrick Cronin Format: Unabridged Length: 10 hrs and 21 mins Language: English Release date: 11-29-16 Publisher: Audible Studios Ratings: 4 of 5 out of 35 votes Genres: Science & Technology, Technology

Publisher's Summary: A ground shaking exposé on the failure of popular cyber risk management methods. How to Measure Anything in Cybersecurity Risk exposes the shortcomings of current "risk management" practices, and offers a series of improvement techniques that help you fill the holes and ramp up security. In his best-selling book How to Measure Anything, author Douglas W. Hubbard opened the business world's eyes to the critical need for better measurement. This book expands upon that premise and draws from The Failure of Risk Management to sound the alarm in the cybersecurity realm. Some of the field's premier risk management approaches actually create more risk than they mitigate, and questionable methods have been duplicated across industries and embedded in the products accepted as gospel. This book sheds light on these blatant risks and provides alternate techniques that can help improve your current situation. You'll also learn which approaches are too risky to save and are actually more damaging than a total lack of any security. Dangerous risk management methods abound; there is no industry more critically in need of solutions than cybersecurity. This book provides solutions where they exist, and advises when to change tracks entirely. Insightful and enlightening, this book will inspire a closer examination of your company's own risk management practices in the context of cybersecurity. The end goal is airtight data protection, so finding cracks in the vault is a positive thing - as long as you get there before the bad guys do. How to Measure Anything in Cybersecurity Risk is your guide to more robust protection through better quantitative processes, approaches, and techniques.

Members Reviews: better know math and statistics before diving in I found this book enjoyable, but most of the math and statistics were way over my head. Fortunately, I'm a general manager and I can hire folks to do the good things that this book lays out. Before listening to this book, our cybersecurity matrix was green, yellow, red. Now we can move toward continuous measurement, which makes more sense.

Not appropriate for audio, buy a hard copy instead Would you try another book from Douglas W. Hubbard and Richard Seiersen and/or Patrick Cronin? Yes, it was obvious that they knew their stuff Any additional comments? I liked this book, I wish I could return it for a hard copy. This book is well done but really hard to follow as an audio book, which is how I bought it. Audible says I can't return it.

Informative the data presented is relevant,but the lack of graphics makes keeping up difficult for someone not familiar with statistics and risk Management.

Technically precise AND presents useful concepts The author presents precise mathematics applicable to estimating cybersecurity risks, probably useful for enterprise-level cybersecurity managers. For small to medium companies who probably do not have the resources to deploy this level of estimation, the concepts are still helpful as counterpoint to commonly-used nominal- and ordinal-level methods of estimating cybersecurity risks.

Would be better without Narrating formulas Overall this is a great cyber security book, which the field is greatly lacking. I learned a lot, and I would said overall this is worth a listen, if you are high enough up your company/organizations security team.