https://red-dart.com/2024/02/17/why-you-need-a-quantitative-cybersecurity-risk-assessment/