https://gearsofresistance.com/2012/03/rainbow-risk-management/