https://rafeeqrehman.com/2014/05/12/updated-ciso-mind-map/