Metrics and risk: All models are wrong, some are useful.

Conveying risk to the company leadership, the metrics collection required to do it, how heat maps are generally bad science, and the requirement for precise modeling of the risk environment.


by CSO Perspectives