https://hawkking.pages.dev/posts/implementing-secure-software-development-program-part-2-1090608/