Writing

Notes on measuring risk

Cyber risk quantification, FAIR, Monte Carlo simulation, and the humans who feed the models.

10 July 2026

Cyber risk has a language problem

Boards can't budget against colours. How FAIR and Monte Carlo simulation replace "high, medium, low" with dollar figures, and why that tooling should be free.

Read article