Mais conteúdo relacionado Endpoint Security Compliance: Top 19 Questions Auditors Ask2. Brought to you by
www.lumension.com
Speaker
Minky Kernacs
Sr. Business Intelligence Consultant
3. Preview of Key Points
General questions
4 areas in most endpoint security audits
Configuration
Patch
management
Endpoint
Security Audit
AV Vulnerability Scanning
© 2012 Monterey Technology Group Inc.
4. General questions
What are our endpoints?
How many?
How do you come up with that list?
© 2012 Monterey Technology Group Inc.
5. Patch
1. What is your process for being informed of
and reviewing patches?
How do you ensure all applications are covered?
2. What patches have you approved?
When were they deployed?
3. What patches did you opt out of and why?
4. What is the patch status of all your endpoints
right now?
5. What is your average time from availability to
install of patches?
© 2012 Monterey Technology Group Inc.
6. Configuration management
1. What is your golden configuration
standard?
2. What is your process for keeping existing
and new system in compliance?
3. What is your process for exceptions?
4. Provide documentation showing all
endpoints are configured in compliance
© 2012 Monterey Technology Group Inc.
7. Antivirus
1. What AV engines are in place?
Scanning options?
2. How many systems have it?
3. How many systems are up-to-date right now?
4. What is your average time from availability to
deployment of updates?
5. How many actual infections in past year?
Details?
6. Can users disable?
7. How are remote/mobile endpoints updated?
© 2012 Monterey Technology Group Inc.
8. Vulnerability Scanning
1. How many systems scanned, how often?
2. How often vulnerability database
updated?
3. Status for vulnerabilities detected in past
year
What was the follow up?
© 2012 Monterey Technology Group Inc.
9. Other possible areas
Encryption
Device control
Application control
© 2012 Monterey Technology Group Inc.
10. Bottom Line
You may already be covering all 4 areas
But you must be able to show
How many systems you have
• How do you know this list is complete
What is their current status in all 4 areas
• As well as history
A good auditor will want process and
documentation process is actually followed
Added benefit:
Being able to easily answer these questions
means you have an efficient and well controlled
endpoint environment
© 2012 Monterey Technology Group Inc.
11. Brought to you by
www.lumension.com
Speaker
Minky Kernacs
Sr. Business Intelligence Consultant