Assessment Objectives
In addition to relevant policies, standards and procedures, the assessor shall examine, interview, and/or test to determine if appropriately scoped evidence exists to support the claim that:
- END-03.3_A01 system components that require diversity are defined.
Assessment rigor: 1
Origin: 172A_3.13.1e_ODP[1] - END-03.3_A02 diversity in system components is created to reduce the extent of malicious code propagation.
Assessment rigor: 1
Origin: 172A_3.13.1e[a] - END-03.3_A03 endpoints that are generally not considered to be commonly affected by malicious software are identified.
Assessment rigor: 1
Origin: SCF Created - END-03.3_A04 the frequency at which to evaluate evolving threats to endpoints that are generally not considered to be commonly affected by malicious software is defined.
Defined parameters: at least annually
Assessment rigor: 1
Origin: SCF Created - END-03.3_A05 evolving threats to endpoints that are generally not considered to be commonly affected by malicious software are evaluated at the defined frequency to determine whether antimalware protection is required.
Assessment rigor: 1
Origin: SCF Created
Ticket collegati
| Tipo di collegamento | Ticket |
|---|---|
| blocks | Evolving Endpoint Protection Threats |
- Secure Controls Framework -
EN: GRCA includes the Secure Controls Framework® (SCF) content, © Secure Controls Framework Council, LLC, used under the Creative Commons Attribution-NoDerivatives 4.0 International Public License. SCF control numbers, names, descriptions and mappings appear exactly as published by the SCF Council – https://securecontrolsframework.com. GRCA may group or reorder SCF content for display, which does not change SCF content; the mappings are shown as links to the frameworks they name. Learn more at https://securecontrolsframework.com.
DE: GRCA enthält Inhalte des Secure Controls Framework® (SCF), © Secure Controls Framework Council, LLC, genutzt unter der Creative Commons Attribution-NoDerivatives 4.0 International Public License. Nummern, Namen, Beschreibungen und Zuordnungen der SCF-Controls erscheinen genau so, wie der SCF Council sie veröffentlicht – https://securecontrolsframework.com. GRCA gruppiert oder sortiert SCF-Inhalte für die Anzeige, ohne sie zu verändern; die Zuordnungen erscheinen als Verknüpfungen zu den genannten Regelwerken. Mehr unter https://securecontrolsframework.com.