https://blog.synack.co.uk/2017/01/28/cissp-certified-information-systems-security-professional-introduction/