It's Time to Stop Measuring Security in Absolutes
All-or-nothing security policies strain resources by aiming for perfection. We need a better way to assess progress.
https://www.darkreading.com/cybersecurity-analytics/time-to-stop-measuring-security-in-absolutes