Source: https://www2.deloitte.com/content/dam/Deloitte/us/Documents/risk/us-aers-compliance riskassessments-02192015.pdf