https://rafeeqrehman.com/2015/04/12/a-take-on-information-security-reports/
A take on information security reports