Information security handbook: develop a threat model and incident response strategy to build a strong information security framework