Infosec's ability to quantify risk
coderinaworldofcode.blogspot.com