https://rafeeqrehman.com/2014/12/14/latest-update-to-ciso-responsibilities-mind-map/