Source: https://legal.thomsonreuters.com/content/dam/ewp-m/documents/thomsonreuters/en/pdf/information-security/clear-information-security-summary.pdf