https://www.sans.org/reading-room/whitepapers/compliance/nerc-cip-patch-management-cisco-ios-trains-36257