Quantifying Cyber Risk: The Art and Math of Attack Surface Scoring (Part 3)

In Part 2, I shared how I use OSSTMM and RAV to give each asset a risk score. It’s a solid way to get a sense of what’…