Board Reporting

How to quantify cyber risk when you have no loss history

Boards do not fund amber. Calibrated estimation produces defensible loss-exposure ranges from expert judgement — here is the method and its failure modes.