Tony Martin-Vegue
I’ve worked in security and risk for more than 25 years, and these days I write, speak and consult on measuring cyber risk in dollars. I built the quantification program at Netflix and wrote From Heatmaps to Histograms. Through 95 Risk Advisory, I help companies build programs of their own.
My work
The book
A practical guide to cyber risk quantification from Apress, with six chapters on finding and vetting the data an analysis needs.
Consulting
Risk assessments, peer benchmarks, and help building a quantification program that sticks.
Start here
If you’re new here, these are the essays I’d read first.
Essays by topic
Heatmaps to Histograms: Field Notes
It’s a free newsletter for risk and security professionals, and each issue brings a practical CRQ technique, a case study from the field, and a tool or prompt you can use the same day.
Your welcome email includes Chapter 5 of the book, Your First Quantitative Risk Assessment, where you build a Monte Carlo simulation in Excel and run a complete risk analysis, free.
Delivered by Substack. No spam, and you can leave with one click.