https://www.advent-im.co.uk/mike-gillespie-in-computer-weekly-security-think-tank-security-is-a-business-not-an-it-function/