Bonus episode with special guest Tony Martin-Vegue

<p>In this special interview episode, hosts <a href="https://www.linkedin.com/in/adrian-sanabria/" target="_blank" rel="noopener noreferer">Adrian Sanabria </a>and <a href="https://www.linkedin.com/in/sieira/" target="_blank" rel="noopener noreferer">Alexandre Sieira </a>sit down with <a href="https://www.linkedin.com/in/tonymartinvegue/" target="_blank" rel="noopener noreferer">Tony Martin-Vegue</a>, author of the upcoming book <em>Heatmaps to Histadograms: A Practical Guide to Cyber Risk Quantification</em>. </p><p>Tony shares his journey from IT and cryptography to becoming a leading voice in cyber risk quantification, including his six years building Netflix&#39;s risk quantification program from the ground up.</p><p><br><strong>Tony Martin-Vegue</strong> brings over two decades of experience in IT and information security. With an economics degree that his mentor recognized as ideal for risk management, Tony has built cyber risk quantification programs at several large companies. Most recently, he spent six years at Netflix where he led approximately 3,000 FAIR-based risk assessments. He now runs his own consulting and advisory firm while promoting quantitative approaches to cyber risk.<br>Resources Mentioned in the Episode:</p><ul><li>The website for Tony’s book: <a href="https://www.heatmapstohistograms.com/" target="_blank" rel="noopener noreferrer">https://www.heatmapstohistograms.com/</a></li><li>Link to Solar Winds breach: <a href="https://en.wikipedia.org/wiki/2020_United_States_federal_government_data_breach" target="_blank" rel="noopener noreferrer">https://en.wikipedia.org/wiki/2020_United_States_federal_government_data_breach</a></li><li>Link to Colonial Pipeline breach: <a href="https://en.wikipedia.org/wiki/Colonial_Pipeline_ransomware_attack" target="_blank" rel="noopener noreferrer">https://en.wikipedia.org/wiki/Colonial_Pipeline_ransomware_attack</a></li><li>The Scoville Scale: <a href="https://en.wikipedia.org/wiki/Scoville_scale" target="_blank" rel="noopener noreferrer">https://en.wikipedia.org/wiki/Scoville_scale</a></li><li>How to use Monte Carlo simulations in Excel: <a href="https://support.microsoft.com/en-us/office/introduction-to-monte-carlo-simulation-in-excel-64c0ba99-752a-4fa8-bbd3-4450d8db16f1" target="_blank" rel="noopener noreferrer">https://support.microsoft.com/en-us/office/introduction-to-monte-carlo-simulation-in-excel-64c0ba99-752a-4fa8-bbd3-4450d8db16f1</a></li><li>The FAIR Institute: <a href="https://www.fairinstitute.org/" target="_blank" rel="noopener noreferrer">https://www.fairinstitute.org/</a></li><li>The FAIR Framework: <a href="https://www.fairinstitute.org/blog/integrating-fair-models-a-unified-framework-for-cyber-risk-management" target="_blank" rel="noopener noreferrer">https://www.fairinstitute.org/blog/integrating-fair-models-a-unified-framework-for-cyber-risk-management</a></li><li>How to Lie with Statistics: Information Security Edition <a href="https://www.youtube.com/watch?v=p3jJnl99Lmc" target="_blank" rel="noopener noreferrer">https://www.youtube.com/watch?v=p3jJnl99Lmc</a></li><li>Cyentia’s IRIS Retina Report <a href="https://www.cyentia.com/services/iris-risk-retina/" target="_blank" rel="noopener noreferrer">https://www.cyentia.com/services/iris-risk-retina/</a></li><li>Verizon’s 2025 Data Breach Investigations Report: <a href="https://www.verizon.com/business/resources/reports/dbir/" target="_blank" rel="noopener noreferrer">https://www.verizon.com/business/resources/reports/dbir</a></li></ul>