From Heatmaps to Histograms
Transform how your organization measures cyber risk — move beyond vague heatmaps to data-driven, decision-ready analysis.
Book Overview
A Practical Guide to Cyber Risk Quantification
From Heatmaps to Histograms is a beginner’s guide to cyber risk quantification, turning vague heatmaps into actionable data and scenarios.
Measure What Matters
Learn how to replace heat maps and color codes with measurable, data-based insights that drive business outcomes.
Practical Methods
Use accessible tools like Excel and Monte Carlo simulations to quantify cyber risk without advanced math.
Executive Communication
Translate complex risk data into clear stories that executives understand and make informed decisions.
Smarter Risk Choices
Evaluate trade-offs, opportunity costs, and acceptable risk levels to make balanced, informed decisions.
About the Author
Meet Tony Martin-Vegue
Tony Martin-Vegue is a cyber risk consultant, speaker, and writer. He’s built and led technology risk programs at Netflix, fintechs, and global financial services firms — helping organizations move from vague heatmaps to data-driven risk decisions.
Testimonials
Clarity That Resonates Across the Industry
Get Your Copy
Exclusive Editions —Coming Spring 2026
Signed copies and CRQ-themed resources will be available directly from this site. Stay tuned for preorder links and exclusive author-signed editions.
Learn How to Turn Risk Into Better Decisions
Stay updated — Get practical insights, case studies, and tools from Heatmaps to Histograms: Field Notes — my free newsletter on cyber risk quantification.
Read More From Tony
Read Tony’s essays on cyber risk quantification, decision science, and security analytics, linking From Heatmaps to Histograms with real-world risk challenges.
-

That Feels Too High: A Risk Analyst's Survival Guide
When stakeholders say your quantitative risk numbers don't "feel right," there are three main reasons: you missed something they know, cognitive bias is…
-

Six Levers That Quietly Change Your Risk and How to Spot Them
Most people think risk only moves when you add controls, but five other hidden forces are quietly reshaping your exposure behind the scenes…
Tools That Turn Insight Into Action
Tools and Download
Access practical worksheets and templates from From Heatmaps to Histograms to put cyber risk quantification into action.