See https://derisking-guide.18f.gov/ - View it on GitHub