https://www.humansecurity.com/learn/blog/who-before-what