First, you must establish agreement among your leadership on the actual risk(s) to measure, then select which data will provide the most accurate representation of the risk.
The following are 5 fundamental rules for measuring cybersecurity risk:
Bonus rule: Gain buy-in from your stakeholders.
========
Thanks.
Dr. Bill Souza
CEO | Founder
www.execcybered.com