https://123dok.net/document/yev14eor-systematic-identification-security-tests-based-security-risk-analysis.html