From Lawfare:

Paul Rosenzweig, the founder of Red Branch Consulting PLLC and the former Deputy Assistant Secretary for Policy in the Department of Homeland Security, gave a live presentation on measuring cybersecurity on April 7, 2021. Among other works on the subject, Rosenzweig recently co-wrote an article for Lawfare titled, “Enterprise Cybersecurity Measurement” that discusses how enterprises can manage, mitigate and monitor their cyber risks by mapping threats and adversary tactics, techniques and procedures to known vulnerabilities.