E' interessante che nella Master's Guide del Verizon 2021 Data Breach Investigations Report vi sia una sezione chiamata Being confident of our data. in cui si evidenzi il ben noto problema del "data-poor environment".
Starting in 2019 with slanted bar charts, the DBIR has tried to make the point that the only certain thing about information security is that nothing is certain. Even with all the data we have, we’ll never know anything exactly. However, instead of throwing our hands up and complaining that it is impossible to measure anything in a data-poor environment, or worse, simply making stuff up, we get to work. This year we continue to represent uncertainty throughout the report figures.