Endpoint Security Management

Every laptop, server and mobile device that touches your data is a way in. Endpoint security management is the work of keeping those devices hardened, patched, monitored and recoverable. SSC assesses how your endpoints are configured today, sets the standard they should meet, and helps your IT team or managed service provider reach it with evidence to prove it.

What we assess

• Hardening baselines for Windows, macOS and server builds, based on vendor and ASD guidance.
• Application control, so only approved software runs. It is the first strategy in the Essential Eight.
• Patching of applications and operating systems, measured against the timeframes in the Essential Eight maturity model.
• Microsoft Office macro settings and user application hardening, two Essential Eight strategies that block common malware delivery.
• EDR and anti-malware coverage: whether every device reports in, alerts reach someone who acts on them, and tamper protection is on.
• Device management: enrolment in Microsoft Intune or a similar tool, disk encryption, and remote wipe for lost devices.
• Event logging: centralised collection and analysis of logs, which the November 2023 update made a Maturity Level Two requirement.

Mapped to the frameworks you answer to

Findings are mapped to Essential Eight maturity levels and to ISO/IEC 27001:2022 Annex A controls 8.1 (user endpoint devices), 8.7 (protection against malware), 8.8 (management of technical vulnerabilities) and 8.9 (configuration management). For New Zealand public sector agencies and their suppliers, we can also map to the NZISM. One piece of work then supports your Essential Eight self-assessment, your ISO 27001 audit and customer security questionnaires.

What you receive

• A current-state rating for each Essential Eight strategy and each device group
• A prioritised remediation plan your IT provider can work from
• A hardening standard for your standard operating environment (SOE)
• Evidence packs for auditors, customers and cyber insurers

Related services

Read our Essential Eight compliance guide and the Essential Eight maturity level comparison, or see our maturity assessment and uplift service. To see the internet-facing side of your environment the way an attacker does, our EASMLens platform maps your external attack surface.