[Defining Security Metrics](Jaquith_2007_1_Defining_Security_Metrics.md)
[Diagnosing Problems and Measuring Technical Security](Jaquith_2007_2_Diagnosing_Problems_and_Measuring_Technical_Security.md)
[Measuring Program Effectiveness](Jaquith_2007_3_Measuring_Program_Effectiveness.md)


## Shift Left: Relative Cost to Correct Security Defects, by Stage

Stage | Relative Cost
--- | ---
Design | 1.0
Implementation | 6.5
Testing | 15.0
Maintenance | 100.0