https://www.sans.org/reading-room/whitepapers/leadership/defense-in-policy-begets-defense-in-depth-35882