https://www.advent-im.co.uk/exploring-iso-iec-27001-aligned-risk-methodologies-a-white-paper-from-peter-daniel-advent-im-security-consultant/