https://kudrin.vc/2017/01/31/ra2017/
Practical corporate risk assessment