Statistically speaking, the kind of weighting scale that
best answers our requisites is a logarithmic scale (which
stresses the differences in the scores). The contribution of
each security best practice is then defined as the weight of
the best practice divided by the sum of all weights. This way,
we applied the values to a logarithmic scale and computed
the individual percentage weights for each of the 64 best
practices.