HS 009 The Metrics of IT Security

How do you measure IT Security ? Specifically, how do you decide to allocate budget and justify the underlying reasoning. Most companies allocate a percentage of IT Budget, but Johna argues differently.