An exerpt from How to Measure Anything in Cybersecurity Risk:
You might have heard the old joke about two hikers getting ready for a walk into the woods. [...] One hiker is wearing his running shoes instead of his regular hiking boots. The other asks, “Is there something wrong with your regular boots?” to which the first hiker responds, “No, I just heard there were bears in the woods today. I wore these shoes so I could run faster.”
Always good to remember this.