https://labs.ripe.net/author/ivodijkhuis/ripe-ncc-information-security-controls-framework-for-cloud-services/