https://www.sans.org/reading-room/whitepapers/access/protect-netwrok-endpoint-critical-security-controls-37202