Source: https://www.enisa.europa.eu/events/cybersecurity_standardisation_2021/presentations/05-05-ruff