Building a matrix that measures people, process, and technology against security goals is a proven method for reducing risk in an organization

The Matrix Reloaded: Security Goals v. Operational Requirements
Building a matrix that measures people, process, and technology against security goals is a proven method for reducing risk in an organization. Here's how.
http://www.darkreading.com/attacks-breaches/the-matrix-reloaded-security-goals-v-operational-requirements/a/d-id/1323796?_mc=sm_dr