[SC-L] Security metrics on flaws detected during architectural review?

[robert at webappsec.org]

I've posted the following entry and I'm wondering what experiences people on this list have had. 

Security metrics on flaws detected during architectural review?
http://www.cgisecurity.com/2009/01/security-metrics-on-flaws-detected-during-architectural-review.html

Regards,
- Robert Auger
http://www.cgisecurity.com/
http://www.webappsec.org/