It Security Metrics: A Practical Framework for Measuring Security & Protecting Data