Perlindungan Endpoint
Menerapkan dan mengelola solusi keamanan endpoint.
Perlindungan Endpoint didefinisikan oleh hasil-hasil NIST CSF 2.0 PR.PS-05 (Installation and execution of unauthorized software are prevented); DE.CM-09 (Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events). Crosswalk Dipetakan melalui crosswalk yang dipublikasikan dalam ISO 27001, CIS v8.1, PCI DSS, 800-53 dan NIS2. Editorial Dipetakan secara editorial dalam SOC 2, CMMC, HIPAA, Essential Eight dan Cyber Essentials. Tidak ada pemetaan dalam data kami Tidak ada pemetaan dalam data kami untuk GDPR, DORA dan CPS 234.
| Kerangka kerja | Persyaratan | Judul | Tautan | Sumber / alasan |
|---|---|---|---|---|
| NIST CSF 2.0 | PR.PS-05DE.CM-09 | Installation and execution of unauthorized software are prevented; Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events | Definisi topik | PR.PS-05 DE.CM-09 |
| ISO 27001 | A.8.1A.8.7A.8.19 | User endpoint devices; Protection against malware; Installation of software on operational systems | Crosswalk | A.8.1: User endpoint devices; not linked to these subcategories in the OLIR mapping. A.8.7: Protection against malware; the OLIR mapping links it to other subcategories only. A.8.19: via PR.PS-05; NIST 800-53 map: CM-7 |
| CIS v8.1 | CIS 2.5CIS 10.1CIS 2.6CIS 2.7CIS 10.2CIS 10.3CIS 10.4CIS 10.5CIS 10.6CIS 10.7 | Allowlist Authorized Software; Deploy and Maintain Anti-Malware Software; Allowlist Authorized Libraries… | Crosswalk | CIS 2.5: via PR.PS-05 CIS 10.1: via DE.CM-09 CIS 2.6: Editorial (CIS's published crosswalk covers 49 of 153 safeguards): allowlist authorised libraries. CIS 2.7: Editorial (CIS's published crosswalk covers 49 of 153 safeguards): allowlist authorised scripts. CIS 10.2: Editorial (CIS's published crosswalk covers 49 of 153 safeguards): automatic anti-malware signature updates. CIS 10.3: Editorial (CIS's published crosswalk covers 49 of 153 safeguards): disable autorun for removable media. CIS 10.4: Editorial (CIS's published crosswalk covers 49 of 153 safeguards): scan removable media for malware. CIS 10.5: Editorial (CIS's published crosswalk covers 49 of 153 safeguards): enable anti-exploitation features. CIS 10.6: Editorial (CIS's published crosswalk covers 49 of 153 safeguards): centrally managed anti-malware. CIS 10.7: Editorial (CIS's published crosswalk covers 49 of 153 safeguards): behaviour-based anti-malware. |
| SOC 2 | CC6.8 | Preventing or detecting unauthorized or malicious software | Editorial | CC6.8: AICPA's TSC mappings are not openly licensed; ControlMapping editorial mapping (criterion summaries are ours, not AICPA text). |
| PCI DSS | 5.2.15.2.25.3.2 | Anti-malware deployed on system components; Anti-malware detects, removes or contains known malware; Periodic scans or continuous behavioural analysis | Crosswalk | 5.2.1: via DE.CM-09 5.2.2: via DE.CM-09 5.3.2: via PR.PS-05; DE.CM-09 |
| CMMC | SI.L2-3.14.2SI.L2-3.14.4 | Malicious Code Protection; Update Malicious Code Protection | Editorial | SI.L2-3.14.2: Malicious code protection; NIST links it via SI-3, which its CSF references don't tie to these subcategories. SI.L2-3.14.4: Update malicious code protection mechanisms; linked via SI-3 (see above). |
| 800-53 | CM-7(5)SI-3SI-4 | Authorized Software — Allow-by-exception; Malicious Code Protection; System Monitoring | Crosswalk | CM-7(5): via PR.PS-05 SI-3: Malicious code protection is the core endpoint control; NIST's CSF 2.0 references don't link SI-3 to PR.PS-05/DE.CM-09. SI-4: via DE.CM-09 |
| HIPAA | §164.308(a)(5)(ii)(B) | Protection from Malicious Software | Editorial | §164.308(a)(5)(ii)(B): HIPAA puts malware protection under security awareness training, so NIST maps it to AT-2/AT-3 rather than to technical anti-malware controls. |
| GDPR | — | Tidak ada persyaratan | Tidak ada pemetaan dalam data kami | Tidak ada persyaratan GDPR yang dipetakan ke topik ini dalam data kami. |
| NIS2 | 6.9 | Protection against malicious and unauthorised software | Crosswalk | 6.9: via PR.PS-05; DE.CM-09; ENISA ISO map: A.8.7 |
| Essential Eight | ISM-0843ISM-1490ISM-1657ISM-1870ISM-1544ISM-1488 | Application control is implemented on workstations; Application control is implemented on internet-facing servers; Application control restricts the execution of executables, libraries, scripts…… | Editorial | ASD assigns these ISM controls to the Essential Eight; ASD publishes no crosswalk to NIST or ISO, so linking them to topics is ControlMapping editorial. |
| DORA | — | Tidak ada persyaratan | Tidak ada pemetaan dalam data kami | Tidak ada persyaratan DORA yang dipetakan ke topik ini dalam data kami. |
| CPS 234 | — | Tidak ada persyaratan | Tidak ada pemetaan dalam data kami | Tidak ada persyaratan CPS 234 yang dipetakan ke topik ini dalam data kami. |
| Cyber Essentials | CE 5 | Malware protection | Editorial | CE 5: Anti-malware software or application allow-listing active on every in-scope device. |
Definisi topik Hasil CSF 2.0 yang mendefinisikan topik ini · Crosswalk setidaknya satu pilihan didukung crosswalk yang dipublikasikan · Editorial Penilaian ControlMapping, beserta alasannya · belum dipetakan, hanya berbagi hasil CSF untuk topik ini · Tidak ada pemetaan dalam data kami belum ada yang dipetakan dalam data kami; sering kali pekerjaan baru, tetapi periksa catatan cakupannya. Metodologi.
ID dan judul persyaratan ditampilkan sebagaimana diterbitkan masing-masing framework, dalam bahasa Inggris.
Pemetaan salah atau belum ada? Laporkan
Tentang Perlindungan Endpoint
Perlindungan endpoint mencakup penerapan dan pengelolaan agen keamanan pada workstation, server, dan perangkat seluler untuk mendeteksi dan mencegah malware, ransomware, serta ancaman lain di tingkat perangkat. Solusi endpoint detection and response (EDR) modern melampaui antivirus tradisional dengan menyediakan analisis perilaku, kemampuan threat hunting, tindakan respons otomatis, dan telemetri forensik yang terperinci. Organisasi sebaiknya memastikan perlindungan endpoint mencakup semua sistem operasi yang digunakan, dikelola secara terpusat dengan kebijakan yang konsisten, serta terintegrasi dengan platform SIEM dan SOAR untuk deteksi dan respons yang terkoordinasi.