https://1library.org/document/zl9gnmgz-misuser-extended-framework-handling-security-requirements-software-development.html