Source: https://www.ibm.com/security/digital-assets/strategy-risk-management-ebook/pdfs/Strategy_Risk_Management_EB.pdf