http://it.toolbox.com/blogs/itmanagement/questions-that-must-be-answered-once-a-security-breach-occurs-70380