Re: No absolute numbers provided. Why?
Also, a metric relating to threats on platform A has no relevance to risk reduction of platform B, unless one is choosing between platforms on the basis of number of threats.
In fact, sharing such metrics could increase risky behaviour by encouraging false subjective probability and potential harm re platform B based on an irrelevant comparison of unrelated threats.
I do risk assessment. Of humans.
Biting the hand that feeds IT
