Source: https://www.cisa.gov/sites/default/files/publications/19_0830_cisa_insider-threat-programs-for-the-cm-sector-implementation-guide.pdf