https://medium.com/@Everclear/risk-response-strategies-avoid-mitigate-transfer-or-accept-ddfc9b57df45