Skip to content

Endpoint Protection

What is Endpoint Protection?

Security software and policies deployed on endpoint devices such as laptops, desktops, and mobile devices to protect against malware, exploits, and unauthorized access.

Information Security

Each of these is named in at least one of the same controls as endpoint protection. The number is how many controls name both.

What the standards actually require on endpoint protection

Requirements naming endpoint protection across 6 standards, quoted from the control text.

Endpoint protections, such as secure configuration, security applications and host monitoring, are implemented where feasible and at least in an ad hoc way on assets important to the delivery of the function.

australian-energy-sector-cyber-security-framework-aescsf::ARCHITECTURE-3b · ARCHITECTURE-3b: Endpoint protections for important assets →

Keep endpoint protection and scanning software that detects and deals with malware up to date and managed; give onboard computers the same protection as computers in the shore office, with anti-malware installed and updated on all work and personal devices on...

BIMCO-8.2 · Malware detection →

The department defines the IT security approaches that will steer control selection and security design, consistent with its security philosophy and priorities, using the business needs, security categories, threat assessment, control objectives and recognised...

canada-itsg-33-it-security-risk-management::A1-4.2.7.2 · 4.2.7.2 Define IT security approaches →

The auditor attempts to download known malicious files from a test URL list via supported browsers to verify web filtering and endpoint protection blocks the payload.

CEP-MA-04 · Web Browsing Malware Test →

Undertakings implement procedures ensuring CIA of ICT systems and services: vulnerability identification and remediation (patching, antivirus, compensating controls); secure configuration baselines;

EIOPA-ICTSG-GL.10 · ICT operations security →

Security management comprises the organizational, process and technical measures that keep regulated systems, data and records confidential, intact and available, minimizing internal and external threats: controls against unauthorized or inadvertent access, ro...

gamp-5-good-automated-manufacturing-practice::O11 · Appendix O11 Security Management →

Questions people ask about endpoint protection

What is Endpoint Protection?
Security software and policies deployed on endpoint devices such as laptops, desktops, and mobile devices to protect against malware, exploits, and unauthorized access.
Why is Endpoint Protection important for compliance?
Endpoint Protection is a key concept in Information Security. Understanding endpoint protection helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Endpoint Protection?
Endpoint Protection appears in the requirement text of Australian Energy Sector Cyber Security Framework (AESCSF), BIMCO Cyber Security, Canada ITSG-33 - IT Security Risk Management, Cyber Essentials Plus, EIOPA Guidelines on ICT Security and Governance (EIOPA-BoS-20/600). Across these standards we have identified 6 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Endpoint Protection?
Explore our compliance framework pages to see how endpoint protection applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Endpoint Protection applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.