__________________ is measured on the basis of the likelihood of leakage of sensitive information and the effect if such leakage happens.