https://theccfegroup.com/the-blog/f/what-our-scope-of-work-report-is-teaching-us-about-risk