https://www.sans.org/reading-room/whitepapers/bestprac/practical-security-considerations-managed-service-provider-on-premise-equipment-36292