Measuring and Managing Information RiskJack Freund, Jack Jones
Measuring and Managing Information Risk
by Jack Freund, Jack Jones · first published 2014
3mentions
2recommended by
3HN commenters
2018–2020first – last mentioned
67% recommend33% neutral
Affiliate links. As an Amazon Associate I earn from qualifying purchases.
The relevant book for this is Measuring and Managing Information Risk: A FAIR Approach by Freund and Jones[0]. Both books are worth reading; Hubbard's influence on FAIR is noticeable and positive. FAIR has the advantage that it comes with a fairly built-out ontology for…
on “Open-sourcing Riskquant, a library for quantifying risk” ↗I highly recommend reading ETS, then 'Measuring and managing information risk', both talk extensively about this. Magoo has written quite a bit as well. I really appreciate the mission support oriented perspective in ETS, something a lot of security practitioners could learn from.
on “Security Engineering – A Guide to Building Dependable Distributed Systems” ↗…cost of acquiring and retaining employees." Iff we want Google to change, we should figure out a way to translate moral outrage into threatening some of the things mentioned in the quote. -- [0] -- Measuring and Managing Information Risk: A FAIR Approach 1st Edition, p. 138.
on “Google Shut Out Privacy and Security Teams from Secret China Project” ↗