Source: https://downloads.cloudsecurityalliance.org/initiatives/ocf/STAR_Cert_Auditing_the_CCM.pdf