Actionable security controls based on your deployed solutions.
54 / 54
requiresSolutions
Description
Status
Impact
Difficulty
—
✓ evidence provided
Medium
Easy
—
✓ evidence provided
Medium
Medium
—
✓ evidence provided
High
Hard
—
✓ evidence provided
Critical
Medium
—
✓ evidence provided
High
Hard
—
✓ evidence provided
Medium
Medium
—
✓ evidence provided
Critical
Medium
—
✓ evidence provided
Critical
Hard
—
Critical
Medium
—
High
Medium
—
High
Easy
—
Medium
Easy
—
High
Medium
—
✓ evidence provided
Critical
Medium
Microsoft Entra ID
✓ evidence provided
Critical
Hard
—
✓ evidence provided
Critical
Easy
—
✓ evidence provided
Critical
Easy
—
✓ evidence provided
Critical
Medium
—
✓ evidence provided
Critical
Medium
—
✓ evidence provided
Critical
Medium
—
Critical
Easy
—
Critical
Medium
—
Critical
Hard
—
Critical
Medium
—
Critical
Medium
—
Critical
Medium
—
Critical
Medium
Microsoft Entra ID
High
Easy
Microsoft Entra ID
Medium
Easy
Microsoft Entra ID
Medium
Easy
—
Critical
Medium
—
High
Hard
—
Critical
Medium
—
Critical
Hard
CrowdStrike Falcon
✓ evidence provided
Critical
Easy
CrowdStrike Falcon
✓ evidence provided
High
Medium
CrowdStrike Falcon
✓ evidence provided
High
Easy
CrowdStrike Falcon
✓ evidence provided
Medium
Medium
CrowdStrike Falcon
✓ evidence provided
Critical
Easy
CrowdStrike Falcon
✓ evidence provided
High
Medium
CrowdStrike Falcon
High
Easy
CrowdStrike Falcon
Medium
Medium
CrowdStrike Falcon
Critical
Easy
CrowdStrike Falcon
High
Medium
CrowdStrike Falcon
High
Easy
CrowdStrike Falcon
Medium
Medium
CrowdStrike Falcon
Critical
Easy
CrowdStrike Falcon
High
Medium
CrowdStrike Falcon
High
Easy
CrowdStrike Falcon
Medium
Medium
CrowdStrike Falcon
Critical
Easy
CrowdStrike Falcon
High
Medium
CrowdStrike Falcon
High
Easy
CrowdStrike Falcon
Medium
Medium
END-007HighMediumEndpoint Security
Limiter strictement les logiciels installés sur le poste d’administration
💡
Why?
Chaque logiciel supplémentaire augmente la surface d’attaque. Limiter les applications réduit les vulnérabilités exploitables et diminue le risque d’introduction de code malveillant.
~8% estimated maturity score gain
⚙️
How?
1Établir une liste blanche des outils d’administration autorisés.
2Interdire toute installation logicielle non validée.
3Mettre en place un processus formel de validation technique et organisationnelle.
4Utiliser un mécanisme de contrôle d’application (AppLocker, SRP, etc.).
5Réaliser un inventaire régulier des logiciels installés.
📊
Indicators (KPIs)
Taux de conformité à la liste blanche (%)
Nombre d’installations non autorisées détectées
Fréquence de revue de la liste des outils autorisés