Meng Sun, “If You Can’t Measure it You Can’t Manage it - Quantitative Analysis of Cyber Risk Prediction and Mitigation”, CTBEF-V5, pp. 150–180, Apr. 2023.