A simple qualitative scale could be used to classify each set of controls that mitigate a risk or scheme as either (i) effective/low risk, partially effective/medium risk or ineffective/high risk, or (ii) very effective/very low risk, effective/low risk, partially effective/medium risk, somewhat effective/high risk and ineffective/ very high risk, or a quantitative scale with numerical-value scores applied to each scheme could be used.