https://www.sans.org/reading-room/whitepapers/analyst/applying-lessons-learned-generation-vulnerability-management-system-35997