SAMMY UI is optimized for resolutions with a width 1024px and higher.
CIS Critical Security Controls
Browse CIS Critical...
13,1: Centralize Security Event Alerting
13,2: Deploy a Host-Based Intrusion Detection Solution
13,3: Deploy a Network Intrusion Detection Solution
13,4: Perform Traffic Filtering Between Network Segments
13,5: Manage Access Control for Remote Assets
13,6: Collect Network Traffic Flow Logs
13,7: Deploy a Host-Based Intrusion Prevention Solution
13,8: Deploy a Network Intrusion Prevention Solution
13,9: Deploy Port-Level Access Control
13,10: Perform Application Layer Filtering
13,11: Tune Security Event Alerting Thresholds
Deploy a Host-Based Intrusion Prevention Solution
13,7: Deploy a Host-Based Intrusion Prevention Solution
Policy defined
Not applicable - Not applicable
None - None
Informal - Informal
Partially written - Partially written
Written - Written
Approved and communicated - Approved and communicated
Control implemented
Not applicable - Not applicable
Not implemented - Not implemented
Parts of policy implemented - Parts of policy implemented
Implemented on some systems - Implemented on some systems
Implemented on most systems - Implemented on most systems
Implemented on all systems - Implemented on all systems
Control automated
Not applicable - Not applicable
Not automated - Not automated
Parts of policy automated - Parts of policy automated
Automated on some systems - Automated on some systems
Automated on most systems - Automated on most systems
Automated on all systems - Automated on all systems
Control reported
Not applicable - Not applicable
Not reported - Not reported
Parts of policy reported - Parts of policy reported
Reported on some systems - Reported on some systems
Reported on most systems - Reported on most systems
Reported on all systems - Reported on all systems
Description

Deploy a host-based intrusion prevention solution on enterprise assets, where appropriate and/or supported. Example implementations include use of an Endpoint Detection and Response (EDR) client or host-based IPS agent.