Expected Information Assurance