I m a dirty vendor. That may not be the best way to start a serious dialogue about security product effectiveness, but I hate to read a post on security theory by some insincere wonk only to discover afterwards that he or she is Lord High Poobah of Marketing at Scaring You For Profit, Inc . The challenge for security professionals is implementing effective security measures in the face of budget constraints and externally-driven mandates. Security metrics are hard is a weak excuse there are a number of common sense approaches you can apply.
Source: https://threatpost.com/security-worth-buying-112310/74679/