https://medium.com/@yosef-nesirat/cybersecurity-risk-management-eight-questions-all-leaders-should-ask-part-2-134416fd9dc5