Calabrese's Razor - A metric for determining the relative importance of different security controls: http://is.gd/kXp5