Patent ID: 11930032
Assignee: nan
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC H

Claim 4:
5. The method of claim 4, wherein step h) comprises:
a. if only P1 security controls are selected, then calculating the expected degree of functionality for all P1 security controls EDP1 by dividing the normalized total inherent risk score by the sum of the weighting factors for all P1 security controls, as in the formula, ED
      
        P
        ⁢
        
          
        
        ⁢
        1
      
    
    =
    
      
        R
        Total
      
      
        
          ∑
          
            i
            =
            1
          
          I
        
        ⁢
        
          w
          i
        
      
    
  
  ,, where I is the number of security controls with priority P1;
b. If P1 and P2 security controls are selected, then setting the expected degree of functionality for all P1 security controls to 1 and calculating the expected degree of functionality for all P2 security controls EDP2 by subtracting the sum of the weighting factors for all P1 security controls from the normalized total inherent risk sore and dividing the remainder by the sum of the weighting factors for all P2 security controls, as in the formula EDP2=(RTotal−Σi=1IwiΣj=1Jwj, where I is the number of security controls with priority P1, and J is the number of security controls with priority P2;
c. if P1, P2 and P3 security controls are selected, then setting the expected degree of functionality for all P1 and P2 security controls to 1 and calculating the expected degree of functionality for all P3 security controls EDP2 by subtracting the sum of the weighting factors for all P1 and P2 security controls from the normalized total inherent risk score and dividing the remainder by the sum of the weighting factors for all P3 security controls, as in the formula EDP3=(RTotal−Σi=1I−Σj=1Jwj)/Σk=1Kwk, where I is the number of security controls with priority P1, J is the number of security controls with priority P2, and K is the number of security controls with priority P3;
wherein the steps above are implemented using a computing device.