You are not alone! The number of people applying statistics to the security problem is increasing. More people are taking what may be considered sparse data and using it to make inferences about large risks. This is not to say big data and data science are excluded; rather, making actionable inferences using limited empirical data, beliefs, and simulations is increasingly important for informing strategy and even prioritizing tactical decisions. To that end, we have included a number of short papers from various researchers in industry and academia on this topic. Also, stay tuned to www.howtomeasureanything.com/cybersecurity, as we will be including more and more research like this on our book's website.