computer languages/markup/HTML on Ben Goldsworthy https://bengoldsworthy.net/tags/computer-languages/markup/html/ Recent content in computer languages/markup/HTML on Ben Goldsworthy tags en-gb me+bgrss@bengoldsworthy.net (Ben Goldsworthy) admin+bg@bengoldsworthy.net (Ben Goldsworthy) CC0 Wed, 18 Nov 2020 13:43:05 +0000 Mitiintel https://bengoldsworthy.net/portfolio/programs/mitiintel/ Wed, 18 Nov 2020 13:43:05 +0000 me+bgrss@bengoldsworthy.net (Ben Goldsworthy) https://bengoldsworthy.net/portfolio/programs/mitiintel/ <p>The main effort of <abbr class="abbr" title="Knowledge Transfer Partnership">KTP</abbr> № 11598 was to explore ways of presenting quantitative <abbr class="abbr" title="information technology">IT</abbr> security risk metrics to non-technical users, inspired by Hubber &amp; Seiersen&rsquo;s book <cite class="cite" itemscope itemprop="citation" itemtype="https://schema.org/Book"><meta itemprop="url" content="https://www.wiley.com/en-us/How&#43;to&#43;Measure&#43;Anything&#43;in&#43;Cybersecurity&#43;Risk%2C&#43;2nd&#43;Edition-p-9781119892304"><span itemprop="name">How to Measure Anything in Cybersecurity Risk</span></cite>. This revolved around the use of Monte Carlo simulations and involved an ambitious plan of research to attempt to quantify the real costs and benefits of a variety of <abbr class="abbr" title="information technology">IT</abbr> security controls, such as user training.</p> The main effort of KTP № 11598 was to explore ways of presenting quantitative IT security risk metrics to non-technical users, inspired by Hubber & Seiersen’s book How to Measure Anything in Cybersecurity Risk. This revolved around the use of Monte Carlo simulations and involved an ambitious plan of research to attempt to quantify the real costs and benefits of a variety of IT security controls, such as user training.

Initially, this was to form part of Mitigate Cyber’s suite of Mitigate Hub modules. However, their unexpected early withdrawal led instead to similar ideas being explored within a game setting.

I also delivered a pair of presentations on the theory behind this project whilst working at Actica.

]]>