Resources · Library
Written by our founders and fellows.
Books and frameworks from the leadership of the Enterprise Risk Quantification Institute. Each one is a working reference for how risk quantification is done in practice.
9Authors
10Books
01 · Co-founders
From the people who started ERQI
Tap for summary
Tony Martin-VegueCo-founder
From Heatmaps to Histograms
A Practical Guide to Cyber Risk Quantification
Apress
Tap for summary
Kristin KingCo-founder
Securing What Feeds Us: Cybersecurity in Food and Agriculture
Foreword by Dr. Darin Detwiler · Wiley, 2026
Tap for summary
David WhiteCo-founder · President, Axio
CERT Resilience Management Model (CERT-RMM)
A Maturity Model for Managing Operational Resilience. With Richard Caralli and Julia Allen.
Addison-Wesley · SEI Series in Software Engineering
“This is the book I wish someone had handed me early on.”
Tony Martin-VegueFrom Heatmaps to Histograms
“This isn’t a textbook. It’s a field guide for a field that’s still being defined.”
Caroline WongThe AI Cybersecurity Handbook
“Anticipating future threats and articulating complex security ideas is half the battle.”
Bob MaleyThe Book of Five Keys
02 · Distinguished fellows
Reading list from our fellows
Tap for summary
Introduced FAIR
Jack JonesMeasuring and Managing Information Risk: A FAIR Approach
With Jack Freund, PhD · Butterworth-Heinemann (Elsevier) · First edition 2014, second edition
Tap for summary
Tap for summary
Dr. Bob MarkThe Essentials of Risk Management
With Michel Crouhy and Dan Galai · McGraw-Hill · Third edition
Tap for summary
Rock LambrosThe CISO Evolution: Business Knowledge for Cybersecurity Executives
With Matthew Sharp · Wiley
Tap for summary
Stefan Hunziker, PhDEnterprise Risk Management: Modern Approaches to Balancing Risk and Reward
Springer Gabler · Third edition
Tap for summary
