ASD Essential Eight

गाइड पढ़ें: Essential Eight: एक व्यावहारिक गाइड →

आठ रणनीतियाँ, परिपक्वता स्तर के अनुसार

यहाँ Essential Eight का अर्थ है ASD द्वारा परिपक्वता स्तर एक से तीन (ML1–ML3) के लिए टैग किए गए ISM नियंत्रण; हर पंक्ति अपने स्तर दिखाती है (ML1–ML3)। ASD अन्य फ़्रेमवर्क के लिए कोई क्रॉसवॉक प्रकाशित नहीं करता, इसलिए हर मिलान ControlMapping का संपादकीय निर्णय है।

तुलनाएँ

आवश्यकताएँ

आवश्यकता की ID और शीर्षक हर फ़्रेमवर्क द्वारा प्रकाशित रूप में, अंग्रेज़ी में दिखाए जाते हैं।

ASD Essential Eight आवश्यकताएँ

ID	आवश्यकता	विषय	में मैप किया गया
Patch applications · 12
ISM-0304	Applications other than office productivity suites, web browsers and their extensions…	—	0
ISM-1690	Patches, updates or other vendor mitigations for vulnerabilities in online services are applied within two weeks of…	—	0
ISM-1691	Patches, updates or other vendor mitigations for vulnerabilities in office productivity suites, web browsers and their extensions, email clients, PDF applications, and security products are applied within two weeks of release	पैच प्रबंधन	13 में से 10
ISM-1692	Patches, updates or other vendor mitigations for vulnerabilities in office productivity suites, web browsers and their extensions, email clients, PDF applications, and security products are applied within 48…	—	0
ISM-1693	Patches, updates or other vendor mitigations for vulnerabilities in applications other…	पैच प्रबंधन	13 में से 10
ISM-1698	A vulnerability scanner is used at least daily to identify missing patches or updates for vulnerabilities in online…	भेद्यता प्रबंधन	13 में से 13
ISM-1699	A vulnerability scanner is used at least weekly to identify missing patches or updates…	भेद्यता प्रबंधन	13 में से 13
ISM-1700	A vulnerability scanner is used at least fortnightly to identify missing patches or updates for vulnerabilities in applications other than office…	—	0
ISM-1704	Office productivity suites, web browsers and their extensions, email clients, PDF…	पैच प्रबंधन	13 में से 10
ISM-1876	Patches, updates or other vendor mitigations for vulnerabilities in online services are applied within 48 hours of…	पैच प्रबंधन	13 में से 10
ISM-1901	Patches, updates or other vendor mitigations for vulnerabilities in office productivity suites, web browsers and their extensions, email clients, PDF applications, and security products are applied within two weeks of release when…	—	0
ISM-1905	Online services that are no longer supported by vendors are removed	—	0
Patch applications & Patch operating systems · 2
ISM-1807	An automated method of asset discovery is used at least fortnightly to support the…	एसेट प्रबंधन, भेद्यता प्रबंधन	13 में से 13
ISM-1808	A vulnerability scanner with an up-to-date vulnerability database is used for…	भेद्यता प्रबंधन	13 में से 13
Patch operating systems · 15
ISM-1407	The latest release, or the previous release, of operating systems are used	—	0
ISM-1501	Operating systems that are no longer supported by vendors are replaced	पैच प्रबंधन	13 में से 10
ISM-1694	Patches, updates or other vendor mitigations for vulnerabilities in operating systems of internet-facing servers and internet-facing network devices are applied within two weeks…	—	0
ISM-1695	Patches, updates or other vendor mitigations for vulnerabilities in operating systems of workstations, non-internet-facing servers and non-internet-facing network devices are applied within one month of release	पैच प्रबंधन	13 में से 10
ISM-1696	Patches, updates or other vendor mitigations for vulnerabilities in operating systems of workstations, non-internet-facing servers and non-internet-facing network devices are applied within 48 hours of…	—	0
ISM-1697	Patches, updates or other vendor mitigations for vulnerabilities in drivers are applied within one month of release…	—	0
ISM-1701	A vulnerability scanner is used at least daily to identify missing patches or updates for vulnerabilities in…	भेद्यता प्रबंधन	13 में से 13
ISM-1702	A vulnerability scanner is used at least fortnightly to identify missing patches or updates for vulnerabilities in operating systems of…	भेद्यता प्रबंधन	13 में से 13
ISM-1703	A vulnerability scanner is used at least fortnightly to identify missing patches or updates for vulnerabilities in drivers	—	0
ISM-1877	Patches, updates or other vendor mitigations for vulnerabilities in operating systems of internet-facing servers and internet-facing network devices are applied within 48 hours…	पैच प्रबंधन	13 में से 10
ISM-1879	Patches, updates or other vendor mitigations for vulnerabilities in drivers are applied within 48 hours of release…	—	0
ISM-1900	A vulnerability scanner is used at least fortnightly to identify missing patches or updates for vulnerabilities in firmware	—	0
ISM-1902	Patches, updates or other vendor mitigations for vulnerabilities in operating systems of workstations, non-internet-facing servers and non-internet-facing network devices are applied within one month of…	—	0
ISM-1903	Patches, updates or other vendor mitigations for vulnerabilities in firmware are applied within 48 hours of release…	—	0
ISM-1904	Patches, updates or other vendor mitigations for vulnerabilities in firmware are applied within one month of release…	—	0
Multi-factor authentication · 16
ISM-0974	Multi-factor authentication is used to authenticate unprivileged human users of systems	मल्टी-फ़ैक्टर ऑथेंटिकेशन	13 में से 10
ISM-1173	Multi-factor authentication is used to authenticate privileged human users of systems	मल्टी-फ़ैक्टर ऑथेंटिकेशन	13 में से 10
ISM-1401	Multi-factor authentication uses either: something people have and something people…	मल्टी-फ़ैक्टर ऑथेंटिकेशन	13 में से 10
ISM-1504	Multi-factor authentication is used to authenticate human users to their organisation’s online services that process…	मल्टी-फ़ैक्टर ऑथेंटिकेशन	13 में से 10
ISM-1505	Multi-factor authentication is used to authenticate human users of data repositories	—	0
ISM-1679	Multi-factor authentication is used to authenticate human users to third-party online services that process, store or…	मल्टी-फ़ैक्टर ऑथेंटिकेशन	13 में से 10
ISM-1680	Multi-factor authentication (where available) is used to authenticate human users to…	—	0
ISM-1681	Multi-factor authentication is used to authenticate customers to online customer…	—	0
ISM-1682	Multi-factor authentication used for authenticating human users of systems is…	—	0
ISM-1683	Successful and unsuccessful multi-factor authentication events are centrally logged	लॉगिंग और ऑडिट	13 में से 10
ISM-1872	Multi-factor authentication used for authenticating human users of online services is…	मल्टी-फ़ैक्टर ऑथेंटिकेशन	13 में से 10
ISM-1873	Multi-factor authentication used for authenticating customers of online customer services provides a…	—	0
ISM-1874	Multi-factor authentication used for authenticating customers of online customer services is phishing-resistant	—	0
ISM-1892	Multi-factor authentication is used to authenticate human users to their organisation’s online customer services that…	—	0
ISM-1893	Multi-factor authentication is used to authenticate human users to third-party online customer services that process…	—	0
ISM-1894	Multi-factor authentication used for authenticating human users of data repositories is…	—	0
Restrict administrative privileges · 20
ISM-0445	Privileged human users are assigned a dedicated privileged user account to be used…	विशेषाधिकार प्राप्त पहुँच	13 में से 10
ISM-1175	Privileged user accounts (excluding those explicitly authorised to access online…	विशेषाधिकार प्राप्त पहुँच	13 में से 10
ISM-1380	Privileged human users use separate privileged and unprivileged operating environments	विशेषाधिकार प्राप्त पहुँच	13 में से 10
ISM-1387	Administrative activities are conducted through jump servers	विशेषाधिकार प्राप्त पहुँच	13 में से 10
ISM-1507	Requests for privileged access to systems and their resources are validated when first…	विशेषाधिकार प्राप्त पहुँच	13 में से 10
ISM-1508	Privileged access to systems and their resources is limited to only what is required…	विशेषाधिकार प्राप्त पहुँच	13 में से 10
ISM-1509	Privileged access events are centrally logged	लॉगिंग और ऑडिट	13 में से 10
ISM-1647	Privileged access to systems and their resources are disabled after 12 months unless…	विशेषाधिकार प्राप्त पहुँच	13 में से 10
ISM-1648	Privileged access to systems and their resources are disabled after 45 days of inactivity	विशेषाधिकार प्राप्त पहुँच	13 में से 10
ISM-1649	Just-in-time administration is used for the administration of systems and their resources	—	0
ISM-1650	Privileged user account and security group management events are centrally logged	—	0
ISM-1685	Credentials for break glass accounts, local administrator accounts and service accounts…	—	0
ISM-1686	Credential Guard functionality is enabled	—	0
ISM-1687	Privileged operating environments are not virtualised within unprivileged operating…	—	0
ISM-1688	Unprivileged user accounts cannot be used to log on to privileged operating environments	—	0
ISM-1689	Privileged user accounts (excluding local administrator accounts) cannot be used to log…	—	0
ISM-1861	Local Security Authority protection functionality is enabled	—	0
ISM-1883	Privileged user accounts explicitly authorised to access online services are strictly…	—	0
ISM-1897	Remote Credential Guard functionality is enabled	—	0
ISM-1898	Secure Admin Workstations are used in the performance of administrative activities	—	0
Application control · 11
ISM-0843	Application control is implemented on workstations	एंडपॉइंट सुरक्षा	13 में से 10
ISM-1490	Application control is implemented on internet-facing servers	एंडपॉइंट सुरक्षा	13 में से 10
ISM-1544	Microsoft’s recommended application blocklist is implemented	एंडपॉइंट सुरक्षा	13 में से 10
ISM-1582	Application control rulesets are validated at least annually	—	0
ISM-1656	Application control is implemented on non-internet-facing servers	—	0
ISM-1657	Application control restricts the execution of executables, libraries, scripts…	एंडपॉइंट सुरक्षा	13 में से 10
ISM-1658	Application control restricts the execution of drivers to an organisation-approved set	—	0
ISM-1659	Microsoft’s vulnerable driver blocklist is implemented	—	0
ISM-1660	Allowed and blocked application control events are centrally logged	लॉगिंग और ऑडिट	13 में से 10
ISM-1870	Application control is applied to user profiles and temporary folders used by operating…	एंडपॉइंट सुरक्षा	13 में से 10
ISM-1871	Application control is applied to all locations other than user profiles and temporary…	—	0
Restrict Microsoft Office macros · 11
ISM-1487	Only privileged human users responsible for checking that Microsoft Office macros are…	—	0
ISM-1488	Microsoft Office macros in files originating from the internet are blocked	एंडपॉइंट सुरक्षा, ईमेल सुरक्षा	13 में से 10
ISM-1489	Microsoft Office macro security settings cannot be changed by human users	—	0
ISM-1671	Microsoft Office macros are disabled for human users that do not have a demonstrated…	—	0
ISM-1672	Microsoft Office macro antivirus scanning is enabled	—	0
ISM-1673	Microsoft Office macros are blocked from making Win32 API calls	—	0
ISM-1674	Only Microsoft Office macros running from within a sandboxed environment, a Trusted…	—	0
ISM-1675	Microsoft Office macros digitally signed by an untrusted publisher cannot be enabled…	—	0
ISM-1676	Microsoft Office’s list of trusted publishers is validated at least annually	—	0
ISM-1890	Microsoft Office macros are checked to ensure they are free of malicious code before…	—	0
ISM-1891	Microsoft Office macros digitally signed by signatures other than V3 signatures cannot…	—	0
User application hardening · 20
ISM-1412	Web browsers are hardened using ASD and vendor hardening guidance, with the most…	सुरक्षित कॉन्फ़िगरेशन	13 में से 9
ISM-1485	Web browsers do not process web advertisements from the internet	—	0
ISM-1486	Web browsers do not process Java from the internet	—	0
ISM-1542	Microsoft Office is configured to prevent activation of Object Linking and Embedding…	—	0
ISM-1585	Web browser security settings cannot be changed by human users	सुरक्षित कॉन्फ़िगरेशन	13 में से 9
ISM-1621	Windows PowerShell 2.0 is disabled or removed	सुरक्षित कॉन्फ़िगरेशन	13 में से 9
ISM-1622	PowerShell is configured to use Constrained Language Mode	—	0
ISM-1623	PowerShell module logging, script block logging and transcription events are centrally…	लॉगिंग और ऑडिट	13 में से 10
ISM-1654	Internet Explorer 11 is disabled or removed	सुरक्षित कॉन्फ़िगरेशन	13 में से 9
ISM-1655	.NET Framework 3.5 (includes .NET 2.0 and 3.0) is disabled or removed	—	0
ISM-1667	Microsoft Office is blocked from creating child processes	—	0
ISM-1668	Microsoft Office is blocked from creating executable content	—	0
ISM-1669	Microsoft Office is blocked from injecting code into other processes	—	0
ISM-1670	PDF applications are blocked from creating child processes	—	0
ISM-1823	Office productivity suite security settings cannot be changed by human users	—	0
ISM-1824	PDF application security settings cannot be changed by human users	—	0
ISM-1859	Office productivity suites are hardened using ASD and vendor hardening guidance, with…	सुरक्षित कॉन्फ़िगरेशन	13 में से 9
ISM-1860	PDF applications are hardened using ASD and vendor hardening guidance, with the most…	सुरक्षित कॉन्फ़िगरेशन	13 में से 9
ISM-1889	Command line process creation events are centrally logged	—	0
ISM-1896	Memory integrity functionality is enabled	—	0
Regular backups · 11
ISM-1511	Backups of data, applications and settings are performed and retained in accordance…	बैकअप और रिकवरी	13 में से 11
ISM-1515	Restoration of data, applications and settings from backups to a common point in time…	बैकअप और रिकवरी, आपदा पुनर्प्राप्ति	13 में से 11
ISM-1705	Privileged user accounts (excluding backup administrator accounts) cannot access…	—	0
ISM-1706	Privileged user accounts (excluding backup administrator accounts) cannot access their…	—	0
ISM-1707	Privileged user accounts (excluding backup administrator accounts) are prevented from…	बैकअप और रिकवरी	13 में से 11
ISM-1708	Backup administrator accounts are prevented from modifying and deleting backups during…	—	0
ISM-1810	Backups of data, applications and settings are synchronised to enable restoration to a…	बैकअप और रिकवरी	13 में से 11
ISM-1811	Backups of data, applications and settings are retained in a secure and resilient manner	बैकअप और रिकवरी	13 में से 11
ISM-1812	Unprivileged user accounts cannot access backups belonging to other user accounts	—	0
ISM-1813	Unprivileged user accounts cannot access their own backups	—	0
ISM-1814	Unprivileged user accounts are prevented from modifying and deleting backups	बैकअप और रिकवरी	13 में से 11
Logging and incident response (all strategies) · 8
ISM-0109	Event logs from workstations are analysed in a timely manner to detect cyber security…	सतत निगरानी	13 में से 10
ISM-0123	Cyber security incidents are reported to the chief information security officer, or one…	रिपोर्टिंग	13 में से 12
ISM-0140	Cyber security incidents are reported to ASD as soon as possible after they occur or…	रिपोर्टिंग	13 में से 12
ISM-1228	Cyber security events are analysed in a timely manner to identify cyber security incidents	विसंगति पहचान (Anomaly Detection), SIEM / SOC	13 में से 10
ISM-1815	Event logs are protected from unauthorised modification and deletion	लॉगिंग और ऑडिट	13 में से 10
ISM-1819	Following the identification of a cyber security incident, the cyber security incident…	घटना प्रतिक्रिया	13 में से 12
ISM-1906	Event logs from internet-facing servers are analysed in a timely manner to detect cyber…	सतत निगरानी, SIEM / SOC	13 में से 10
ISM-1907	Event logs from non-internet-facing servers are analysed in a timely manner to detect…	सतत निगरानी	13 में से 10

विषय कवरेज

Essential Eight की मैप की गई आवश्यकताओं वाले विषय (16):

हमारे डेटा में कोई मैपिंग नहीं कोई Essential Eight आवश्यकता नहीं (34):