https://www.sans.org/reading-room/whitepapers/casestudies/case-study-critical-controls-sony-implemented-36022