https://medium.com/@faheemtariq_66529/how-it-works-and-where-it-fits-in-a-security-program-0f7e0cf5f520