https://orbitbrain.com/blog/cisa-releases-decision-tree-model-to-help-companies-prioritize-vulnerability-patching/