While talking about fingerprinting students on Buses, Schneier gives us five questions to use to evaluate Secuirty Countermeasures:
- What assets are you trying to protect?
- What are the risks to these assets?
- How well does the security solution mitigate those risks?
- What other risks does the security solution cause?
- What costs and trade-offs does the security solution impose?
Doubt's Blog 