Source: https://www.softwareimprovementgroup.com/wp-content/uploads/2019/12/APracticalModelForSoftwareSecurity.pdf