This paper examines a somewhat simplified version of the insider threat kill chain and provides concrete examples and use cases of how privileged access management can help stop attacks and breaches.