Statistics of Using Machine Learning to Assist with the Selection of Security Controls During Security Assessment