Security Risk Assessment

Framework for evaluating security spending based on possible exposure risk rather than arbitrary budget allocation.