https://technicalatg.com/how-should-risk-managers-respond-to-a-cyber-attack/