https://www.pivotpointsecurity.com/2018-security-posture-checklist/