https://reyadel.wordpress.com/2008/11/06/the-iqa-of-information-security/