Jaikumar Vijayan in a Computerworld article asks: How secure is secure enough? which of course is a question that fits in well with the theme of this "good enough" blog.
Describing the answer to the question as the Holy Grail of the information security industry. "... by adopting the right approaches, it is possible to arrive at a better answer than some might expect" he goes on to say.
He then lays out five steps to help you determine whether your company is secure enough. Go read his advice, here.