https://www.malaysiainternet.my/2020/01/evaluating-your-security-controls-be-sure-to-ask-the-right-questions/