PS-01—Endpoint Detection and Response

>Control Description

Endpoint Detection and Response (EDR) software is deployed to continuously monitor, detect, and respond to cyber threats and patterns of malicious behavior and activity.

Theme

Technology

Type

Preventive

Policy/Standard

Network Security Standard

>Implementation Guidance

1. Deploy Endpoint Detection and Response (EDR) software to continuously monitor, detect, and respond to cyber threats and patterns of malicious behavior and activity. 2. Ensure that the EDR configurations are periodically reviewed.

>Testing Procedure

1. For a sample of endpoints, validate whether Endpoint Detection and Response (EDR) software is installed and continuously monitor, detect, and respond to cyber threats and patterns of malicious behavior and activity. 2. Inspect whether the EDR configurations are reviewed periodically.