https://riskacademy.blog/guest-blog-werner-gleissner-risk-management-basics/