It is common knowledge that any system or process that cannot be measured cannot be managed. This wisdom also applies to security as well. As much as the expansion of use of Information Technology (IT) in various processes is increasing, the question of security readily comes to mind often. Today they see various new ICT products and applications appearing in the market daily via web sites. Again, cases of Web security breaching are also on the increase since the Internet is accessible from anywhere.