Whenever you're ready, walk me through how you'd approach this.
What metrics do you use to track the effectiveness of your security recommendations?
