https://genesis-aka.net/information-technology/management/2024/02/29/how-to-build-a-strong-it-risk-mitigation-strategy/