https://www.fintechfutures.com/2015/03/dont-delegate-cyber-risk-management-responsibility/