https://gpaguide.com/implement-a-security-framework/