https://5dok.org/document/q7wx8l1d-defining-process-statistical-analysis-vulnerability-management-using-kpi.html