I don’t remember where I saw it, but it was probably something from the Security Policy Center.
Thanks.
I did look it up earlier today.