A review by coliester
How to Measure Anything in Cybersecurity Risk by Douglas W. Hubbard, Richard Seiersen

informative medium-paced