https://www.sans.org/reading-room/whitepapers/analyst/understanding-security-regulations-financial-services-industry-37027