Analytic Hierarchy Process, Criteria for checking compliance, Critical IT infrastructure security, Security countermeasure.