https://csirt.sr/risk-assessment-techniques-for-secure-it-systems/