An Empirical Analysis of Cyber Security Incidents at a Large Organization
Security metrics and security investment models