https://www.pivotpointsecurity.com/cui-basic-and-cui-specified-whats-the-difference/