http://www.techrepublic.com/article/zero-in-on-it-security-risks-by-applying-the-8020-rule-to-vulnerability-assessments/#ftag=RSS56d97e7