https://mamchenkov.net/wordpress/2016/08/31/what-is-risk-management/