Source: https://www.eba.europa.eu/documents/10180/1841624/Final Guidelines on ICT Risk Assessment under SREP (EBA-GL-2017-05).pdf/ef88884a-2f04-48a1-8208-3b8c85b2f69a