https://www.securityforward.com/how-to-do-a-physical-security-risk-assessment/