A Method for Developing Qualitative Security Risk Assessment Algorithms.