https://www.sans.org/reading-room/whitepapers/analyst/improving-application-privilege-management-critical-security-controls-update-36912