https://www.sans.org/reading-room/whitepapers/analyst/blueprint-cis-control-application-securing-sap-landscape-37010