Securosis is an information security research and advisory firm dedicated to transparency, objectivity, and quality. Our job is to save you money and help you do your job better and faster by helping you cut through the noise and providing clear, actionable, pragmatic advice on securing your organization. Following our guiding principle of Totally Transparent Research, we provide nearly all our content for free. We are totally obsessed with improving the practice of information security. Follow our guide to transparency and objectivity.”]
Source: http://securosis.com/research/publication/project-quant-metrics-model-report/