A Six Sigma Approach to Security

How sure are you that your security policy is effective. Let's say that it is, so how effective is it? What costs are incurred by the policy, and I don't mean just monetary. One way to answer these questions and ensure the policy is not only effective, but also efficient, is to apply the Six Sigma approach.