Source: https://www2.deloitte.com/content/dam/Deloitte/ca/Documents/risk/ca-fr-risk-cyber-5-steps.pdf