# Lessons learned in risk measurement - Host: [magoo.medium.com](https://links.thingelstad.xyz/hosts/magoo.medium.com/) - Saved: May 24, 2022 (2022-05-25T02:36:27Z) - Record: https://links.thingelstad.xyz/links/9c7cee586801/ - JSON: https://links.thingelstad.xyz/links/9c7cee586801.json ## What Jamie wrote This is a wide collection of observations and learnings applying risk measurement to cybersecurity. > I find that the strongest suggestion I can pull from my observations is that security engineers must be capable of structuring and organizing the risks they want to mitigate collaboratively with a large group. We did this with source code (CVS, SVN, Git, GitHub) and we probably need this attitude towards codification and collaboration on the subjective quantification of risk. Most security organizations are swimming in data, and it is still a struggle to align the learnings from that data with the engineering objectives. Improving risk measurement is a big help with that, but equally important is to make sure that the mechanisms of your security function are aligned with the broader engineering team. If your planning cadence, delivery structures, and build processes are not aligned you are doomed before you start. ## Facts - Kind: [Page](https://links.thingelstad.xyz/kinds/page/) ## Appears in - [WT221: Weekly Thing #221 / Rebooting, Incidents, Risk](https://weekly.thingelstad.com/archive/221/), Notable ## Saved the same week - [USDTea: The first stablecoin backed by cans of AriZona Iced Tea](https://links.thingelstad.xyz/links/c2c54403282a/) (usdtea.io, May 24, 2022) - [The not-so-obvious positive outcomes of great incident management | FireHydrant](https://links.thingelstad.xyz/links/d15649074b15/) (firehydrant.com, May 24, 2022) - [How This Ends](https://links.thingelstad.xyz/links/af27bfb3d9d4/) (avc.com, May 24, 2022) - [The smallest viable audience](https://links.thingelstad.xyz/links/7fa2be6ba085/) (seths.blog, May 24, 2022) - [How To Be Successful - Sam Altman](https://links.thingelstad.xyz/links/9867e4779389/) (blog.samaltman.com, May 24, 2022) ## Elsewhere - Wayback Machine: https://web.archive.org/web/*/https://magoo.medium.com/lessons-learned-in-risk-measurement-c33b4de0f72e