Andrew Jaquith of SecurityMetrics.org posted an interesting story called Hamster Wheels of Pain. He collected and posted the security process “wheels” of 11 security vendors. I think Andrew is a little too cynical regarding some of these process charts. Some are used to sell products, and often reflect vendor biases. Others are just ways to break the security problem down into manageable chunks. Does this make me bad? I doubt it. I use the diagram at right in my classes to emphasize the traffic-centric approach.”]
Source: https://taosecurity.blogspot.com/2005/10/securitymetrics-documents-security.html