For establishing the importance of the security
mechanisms, we used the weights on the relative importance
of the original list of security best practices provided in [1].
These values were originally provided by security experts
(see [1] for the characterization of these experts) that voted
the importance of each individual practice using the
following four values scale: 4-Critical to the system; 3-
Important; 2-Advisable to implement; 1-Not much relevant.
The reasoning is that, on average, the most important
practices are emphasized, even if there is no unanimity.