Jeff Jones just started a blog series to show the impact of our Security Development Lifecycle on the updates to be deployed. It is a pretty interesting read:

Here is the February version: Feb09 Security Bulletin SDL Benefit Summary

Roger