An interesting, semi-quantified risk analysis tool. Allows you to address both the protective benefits and the resource/operational cost of various safeguards, and compare them against each other.
« Passwords Re-examined | Main | Weekly Summary of the "DHS Daily Open Source Infrastructure Report" »