This book tackles the problem of complexity within IT environments, i.e., "Cybercomplexity," which is generally recognized as a principal source of cybersecurity risk.
This book provides the conceptual foundation of security risk assessment and thereby enables reasoning about risk from first principles.