The Matrix That Isn't
Being invited to offer a tutorial on the MATLAB and Gnu Octave matrix languages, for cyber security specialists, prompted me to revisit a question that has bothered me for some time. In cyber security, as in many other fields, a ‘Risk Matrix’ is a table of likelihood versus severity, into whose boxes one places various risk events. Likelihood times severity gives a useful metric for the ‘likely severity’ – called ‘impact’ - so we can focus our attention on the most likely and severe events. Likelihood Severity Low likelihood Medium likelihood High likelihood High severity High severity High severity Low likelihood Medium likelihood High likelihood Medium severity Medium severity Medium severity Low likelihood Medium likelihood High likelihood Low severity Low severity Low seve