“How to Measure Anything in Cybersecurity Risk makes a strong case for quantifying what organizations are up against. This book is equally valuable for technical security practitioners, risk and compliance professionals as well as security leaders. It provides not only concepts but an essential roadmap for measuring risk, developing metrics, and determining return on investment. I recommend anyone looking for a scientific approach for measuring cybersecurity risk to take advantage of Doug Hubbard and Richard Seiersen’s expertise on this topic. “

Gerhard Eschelbeck, Former CISO at Google