https://123dok.net/document/zx5odd6v-using-common-criteria-reusable-knowledge-security-requirements-elicitation.html