Official recommendations, such as the BSI IT-Grundschutz or the NIST Incident Response Life Cycle, or imminent regulations, ...