Abstract: An apparatus and/or method for configuring a computer to execute a method for determining whether an entity process exceeds a threshold is provided. The exceeding of said threshold may characterize the process as a high risk process. The method may include using a receiver to receive selected effectiveness criteria. The selection of effectiveness criteria may be based on the identification of the entity process. The method may further include determining an index value for each of the effectiveness criteria with respect to the entity process; weighting the index value for each of the effectiveness criteria; calculating a composite weighted risk score for the entity process based on the weighting of the index value for each of the effectiveness criteria; and comparing the composite weighted risk score to the threshold in order to determine whether the entity process is a high risk process.