TIM-8390: Strategic Management of Cybersecurity: General and Technology

Hubbard, D. W., & Seiersen, R. (2016). How to measure anything in cybersecurity risk. Wiley.
Read Chapter 3 – Model Now!: An Introduction to Practical Quantitative Methods for Cybersecurity.
This chapter explains various ways to quantify and calculate cybersecurity risk.

Ligo, A. K., Kott, A., & Linkov, I. (2021). How to measure cyber-resilience of a system with autonomous agents: approaches and challenges. IEEE Engineering Management Review, 49(2), 89–97.
In this journal article, researchers discuss the development of approaches to assess the performance of cyber-physical systems, their exposure to various types of threats, and the ability of cybersecurity components and systems to withstand disruptions.

Rios Insua, D., Couce, V. A., Rubio, J. A., Pieters, W., Labunets, K., & G. Rasines, D. (2021). An adversarial risk analysis framework for cybersecurity. Risk Analysis: An International Journal, 41(1), 16–36.
This journal article explores risk analysis as an essential methodology for cybersecurity as it allows organizations to deal with cyber threats potentially affecting them, prioritize the defense of their assets, and decide what security controls should be implemented.