https://www.sans.org/reading-room/whitepapers/critical/practical-considerations-outsourcing-implementation-monetary-authority-singapore-37277