Managing the security of information systems with partially observable vulnerability - BizPub.ai