https://mitec.cc/5-it-security-implementation-myths/