Risk I/O CEO Ed Bellis discusses the best practices of information security in this blog post.

Best Practices of Information Security = Vanity Metrics
blog.risk.io