https://blog.wisefaq.com/2009/01/27/key-security-questions-that-every-executive-should-be-able-to-answer/