The Endpoint-to-Cloud Privilege Security Checklist: 21 Controls to Eliminate Standing Access