https://rafeeqrehman.com/2015/01/18/using-swot-analysis-to-create-infosec-strategy/