https://www.sans.org/reading-room/whitepapers/analyst/advancing-endpoint-protection-compliance-promisec-endpoint-manager-36507