Risk & Uncertainty

Measuring cybersecurity is like any other measurement in the sense that it does not require certainty. Various types of measurement scales can push our understanding of measurement even further. But could a scale like High, Medium, or Low constitute a proper measurement?