Welcome to From Heatmaps to Histograms: Field Notes

Risk quantification doesn't have to be expensive, overly technical, or impossible to implement. This newsletter delivers practical methods, tools, and frameworks that you can put to work immediately - no advanced degrees or specialized software required.

I'm Tony Martin-Vegue, author of the upcoming book "From Heatmaps to Histograms: A Practical Guide to Cyber Risk Quantification" (Apress, early 2026). I've spent years field-testing these approaches with real-world constraints: limited budgets, tight deadlines, and skeptical stakeholders.

What you'll get:

• Step-by-step quantification methods you can implement today

• GenAI prompts for risk analysis (done responsibly)

• Deep dives into public datasets and industry reports

• Downloadable templates and practical resources

• Behind-the-scenes content from the book

Whether you're in cybersecurity, GRC, or broader risk management, this is for professionals who need results, not theory.

More from me

Read my essays on risk and quantification | Follow me on LinkedIn

Subscribe to get full access to the newsletter and publication archives.