This module explores the fundamental concepts of measurement in cybersecurity, including common misconceptions, measurement scales, and the role of probability in decision-making. Learners will gain insight into how to effectively measure and assess cybersecurity risks using a structured and analytical approach.

This module introduces learners to quantitative risk assessment techniques, including Monte Carlo simulations and loss exceedance curves, using Excel for practical risk analysis and decision-making. It covers how to incorporate uncertainty, use expert judgment, and visualize risk data effectively.

This module explores the importance of evidence-based decision-making in cybersecurity, focusing on how to measure and evaluate risk analysis methods effectively. Learners will understand the limitations of expert opinion and discover how data-driven approaches can lead to more reliable outcomes. The module also covers strategies for improving the human element in risk assessment.

This module delves into the challenges of using risk matrices and ordinal scales in cybersecurity, examining their limitations, psychological biases, and fallacies that hinder accurate risk assessment. Learners will explore quantitative methods, evaluate common misconceptions, and understand how to improve decision-making in risk analysis.

This module provides strategies for breaking down complex risks and decisions into manageable components. It covers techniques for improving clarity, reducing uncertainty, and applying structured evaluation methods in decision analysis. Learners will develop the ability to assess and model risks effectively using real-world examples.

This module explores the principles of calibrated probability assessments, helping learners recognize and correct overconfidence in their judgments. It provides practical exercises and insights into improving decision-making through structured feedback and expert aggregation. Participants will understand how to enhance their ability to quantify uncertainty accurately.

This module introduces learners to Bayesian reasoning and its practical application in cybersecurity. It covers the foundational concepts of probability, prior beliefs, and data-driven decision-making to reduce uncertainty in risk assessments. Learners will gain insights into evaluating claims using statistical methods and real-world examples.

This module explores Bayesian methods for handling uncertainty in cybersecurity, focusing on the use of Beta distributions, Log Odds Ratios, and expert judgment to refine risk estimates. Learners will gain insights into how to model sparse data and improve decision-making under uncertainty. The module also covers techniques for combining expert input and empirical data to enhance predictive models.

This module explores the development and application of security metrics to improve organizational security practices. Learners will gain an understanding of functional metrics, survival and wait-time baselines, and escape rates, as well as the role of prescriptive analytics in security decision-making.

This module explores how to measure and evaluate the effectiveness of security investments using sparse data analytics, the BOOM framework, and dimensional modeling. It covers the development of security business intelligence and the application of metrics to both technical and people-based security processes.

This module explores the strategic integration of cybersecurity risk management (CSRM) within organizations, focusing on roles, audit processes, and alignment with enterprise-wide risk practices. Learners will understand how to implement effective risk frameworks and improve measurement techniques in real-world scenarios.