Measuring Security

What is to measure? Can you measure security?