https://1library.org/document/qvljlwgy-evaluating-confidentiality-impact-in-security-risk-scoring-models.html