https://lirneasia.net/2013/06/critical-infrastructure-hardening-who-should-pay-and-how-much/