https://9dok.net/document/zkwjn1ge-from-documentation-to-risk-assessment.html