How to calculate information value for effective security risk assessment - Sajko, Mario (Array, 2006)