Source: https://www.aspenrmg.com/Resources/Sample_Security_Management_Program-Hopwood-Thompson.pdf