https://licensecounter.jp/engineer-voice/blog/uploads/05_SEPM-Policy-4-Rule-2.png