{
  "id": "9c7cee586801",
  "url": "https://magoo.medium.com/lessons-learned-in-risk-measurement-c33b4de0f72e",
  "title": "Lessons learned in risk measurement",
  "note": "This is a wide collection of observations and learnings applying risk measurement to cybersecurity. \n\n> I find that the strongest suggestion I can pull from my observations is that security engineers must be capable of structuring and organizing the risks they want to mitigate collaboratively with a large group. We did this with source code (CVS, SVN, Git, GitHub) and we probably need this attitude towards codification and collaboration on the subjective quantification of risk.\n\nMost security organizations are swimming in data, and it is still a struggle to align the learnings from that data with the engineering objectives. Improving risk measurement is a big help with that, but equally important is to make sure that the mechanisms of your security function are aligned with the broader engineering team. If your planning cadence, delivery structures, and build processes are not aligned you are doomed before you start.",
  "voice": "mixed",
  "saved": "2022-05-25T02:36:27Z",
  "host": "magoo.medium.com",
  "kind": "page",
  "tags": [],
  "record": "https://links.thingelstad.xyz/links/9c7cee586801/",
  "markdown": "https://links.thingelstad.xyz/links/9c7cee586801.md",
  "issues": [
    {
      "number": 221,
      "slug": "weekly-thing-221-rebooting-incidents-risk",
      "title": "Weekly Thing #221 / Rebooting, Incidents, Risk",
      "date": "2022-05-29T12:51:56.314612Z",
      "section": "Notable",
      "position": 11,
      "url": "https://weekly.thingelstad.com/archive/221/",
      "page": "https://links.thingelstad.xyz/issues/221/"
    }
  ],
  "connections": {
    "same_host": {
      "count": 0,
      "page": "https://links.thingelstad.xyz/hosts/magoo.medium.com/",
      "nearest": []
    },
    "same_week": {
      "count": 27,
      "nearest": [
        {
          "id": "c2c54403282a",
          "title": "USDTea: The first stablecoin backed by cans of AriZona Iced Tea",
          "url": "https://usdtea.io/",
          "record": "https://links.thingelstad.xyz/links/c2c54403282a/"
        },
        {
          "id": "d15649074b15",
          "title": "The not-so-obvious positive outcomes of great incident management | FireHydrant",
          "url": "https://firehydrant.com/blog/positive-business-outcomes-of-great-incident-management/",
          "record": "https://links.thingelstad.xyz/links/d15649074b15/"
        },
        {
          "id": "af27bfb3d9d4",
          "title": "How This Ends",
          "url": "https://avc.com/2022/05/how-this-ends-2/",
          "record": "https://links.thingelstad.xyz/links/af27bfb3d9d4/"
        },
        {
          "id": "7fa2be6ba085",
          "title": "The smallest viable audience",
          "url": "https://seths.blog/2022/05/the-smallest-viable-audience/",
          "record": "https://links.thingelstad.xyz/links/7fa2be6ba085/"
        },
        {
          "id": "9867e4779389",
          "title": "How To Be Successful - Sam Altman",
          "url": "https://blog.samaltman.com/how-to-be-successful",
          "record": "https://links.thingelstad.xyz/links/9867e4779389/"
        }
      ]
    },
    "mentions": [],
    "mentioned_by": [],
    "saved_twice": []
  },
  "elsewhere": {
    "wayback": "https://web.archive.org/web/*/https://magoo.medium.com/lessons-learned-in-risk-measurement-c33b4de0f72e"
  }
}